flow-pull-request-checks.yaml

name: PR Checks
on:
  workflow_dispatch:
  pull_request:
    types:
      - opened
      - reopened
      - synchronize

concurrency:
  group: pr-checks-${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

permissions:
  contents: read
  pull-requests: write

jobs:
  test:
    name: Node v${{ matrix.node-version }} Tests
    runs-on: nft-accelerators-linux-medium
    strategy:
      matrix:
        node-version: [ 18, 20 ]
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
        with:
          egress-policy: audit

      - name: Checkout repository
        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4

      - name: Setup Node ${{ matrix.node-version }}
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
          node-version: ${{ matrix.node-version }}

      - name: Install packages
        run: npm ci

      - name: Run Jest Tests
        run: npm run test

      - name: Publish Test Report
        uses: step-security/publish-unit-test-result-action@cc82caac074385ae176d39d2d143ad05e1130b2d # v2.18.0
        if: ${{ !cancelled() }}
        with:
          check_name: Jest Node ${{ matrix.node-version }} Test Results
          check_run_disabled: true
          json_thousands_separator: ","
          junit_files: "**/junit*.xml"