setadinfo/docs/github-actions-ci.example.yml at main · moroshani/setadinfo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
name: CI

on:
  pull_request:
  push:
    branches: [main]

jobs:
  backend:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"
      - run: python -m pip install --upgrade pip
      - run: python -m pip install -r backend/requirements.txt
      - run: DATABASE_URL=sqlite:///./tmp-ci-migration.db python -m alembic -c alembic.ini upgrade head
      - run: PYTHONPATH=backend python -m unittest discover -s backend/tests -v

  frontend:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: frontend-workbench
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "22"
      - run: corepack enable
      - run: pnpm install --frozen-lockfile
      - run: pnpm lint
      - run: pnpm build

  public-safety:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Block private operations material
        run: |
          test ! -d .ops-private
          ! find . \
            -path './.git' -prune -o \
            \( -name '*.dump' -o -name '*.pem' -o -name '*.key' -o -name '.env' \
               -o -path './backend/data/*' -o -path './backend/wheelhouse/*' \
               -o -path './frontend-workbench/public/fonts/YekanBakh*.ttf' \) \
            -print | grep .
      - name: Block known private identifiers
        run: |
          ! grep -RInE '5\.159|ariaproject|@setadinfobot|Test setad|Setadinfochannel' \
            --exclude-dir=.git \
            --exclude=pnpm-lock.yaml \
            --exclude=ci.yml \
            --exclude=github-actions-ci.example.yml \
            .