ci.yml

name: CI
on:
  pull_request:
  push:
    branches:
      - main
env:
  NODE_VERSION: 18.10.0
  PNPM_VERSION: 8
  NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
jobs:
  pr:
    name: 👷 Build / Lint / Test
    runs-on: ubuntu-latest
    container:
      # the container version should be the same as the version of the Playwright package
      image: mcr.microsoft.com/playwright:v1.47.0-jammy
      options: --user root
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          # ref: main
          fetch-depth: 0

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        with:
          version: ${{ env.PNPM_VERSION }}

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'pnpm'
      # - name: Restore cached npm dependencies
      #   uses: actions/cache/restore@v4
      #   with:
      #     path: |
      #       node_modules
      #     key: npm-dependencies-${{ hashFiles('pnpm-lock.yaml') }}

      # Setup container
      - name: Mark directory as safe
        run: git config --system --add safe.directory /__w/descope-js/descope-js
      - name: Install jq
        run: apt-get update && apt-get install -y jq
      - name: Set permission
        run: chmod -R 777 /usr/local

      - name: Install dependencies
        run: pnpm install --frozen-lockfile --ignore-scripts
        env:
          CI: true
          NODE_AUTH_TOKEN: ${{ secrets.CI_NPM_READ_ORG }}

      # - name: Set NX cloud shas
      #   uses: nrwl/nx-set-shas@v4
      # - name: Install Playwright Browsers
      #   run: npx playwright install --with-deps

      # - name: Cache npm dependencies
      #   uses: actions/cache/save@v4
      #   with:
      #     path: |
      #       node_modules
      #     key: npm-dependencies-${{ hashFiles('pnpm-lock.yaml') }}

      - name: Gitleaks
        run: npm run leaks
        shell: bash

      - name: License validation
        run: pnpm run licenseCheck

      - name: Build
        run: pnpm run build

      - name: Lint
        run: pnpm run lint

      - name: Test
        run: pnpm run test

      - name: E2E
        run: pnpm nx affected --target test:e2e
        env:
          HOME: /root

      - name: Upload HTML report
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: e2e-report
          path: packages/**/playwright-report