ci: upgrade aws credentials action #59
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| #TODO: Find a way to test "yarn dev" and "yarn preview" in the CI | |
| name: Check code | |
| env: | |
| APP_HOME: app | |
| NODE_VERSION: 17.9.0 | |
| # yamllint disable-line rule:truthy | |
| on: | |
| push: | |
| branches: "*" | |
| pull_request: | |
| types: [opened, reopened, synchronize] | |
| jobs: | |
| lint-format-and-dep-check: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Lint Code Base (PR against development branch) | |
| # yamllint disable-line rule:line-length | |
| if: github.event_name == 'pull_request' && github.base_ref == 'development' | |
| uses: github/super-linter/slim@v4 | |
| env: | |
| VALIDATE_ALL_CODEBASE: true | |
| DEFAULT_BRANCH: ${{ github.base_ref }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Lint Code Base (against PR base branch) | |
| # yamllint disable-line rule:line-length | |
| if: github.event_name == 'pull_request' && github.base_ref != 'development' | |
| uses: github/super-linter/slim@v4 | |
| env: | |
| VALIDATE_ALL_CODEBASE: false | |
| DEFAULT_BRANCH: ${{ github.base_ref }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| DISABLE_ERRORS: true | |
| - name: Lint Code Base (against current branch) | |
| if: github.event_name == 'push' | |
| uses: github/super-linter/slim@v4 | |
| env: | |
| VALIDATE_ALL_CODEBASE: false | |
| DEFAULT_BRANCH: ${{ github.head_ref }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| DISABLE_ERRORS: true | |
| # TODO: Check allow-licenses to test for deps with non-permissive licenses | |
| - name: 'Dependency Review' | |
| uses: actions/dependency-review-action@v3 | |
| with: | |
| fail-on-severity: 'high' | |
| base-ref: ${{ github.base_ref }} |