node-pr-jobs-secure.yml

# Copyright Strimzi authors.
# License: Apache License 2.0 (see the file LICENSE or http://apache.org/licenses/LICENSE-2.0.html).
name: Node

# Running target makes it secure as this is the only way to get hold of github secrets
on: [pull_request_target]

jobs:
  build-current:
    runs-on: ubuntu-20.04
    name: Build and Test
    steps:
      - name: Checkout master
        uses: actions/checkout@v2
        with:
          ref: master
      - name: Install Dependencies
        run: npm ci
      - name: Build
        run: npm run build
      - name: Upload Master Bundle Report for client and server
        run: |
          echo "CLIENT_MASTER_REPORT=$(cat generated/bundle-analyser/client-report.json)" >> $GITHUB_ENV 
          echo "SERVER_MASTER_REPORT=$(cat generated/bundle-analyser/server-report.json)" >> $GITHUB_ENV 
      - name: Checkout PR Branch
        uses: actions/checkout@v2
        with:
          repository: ${{github.event.pull_request.head.repo.full_name}}
          ref: ${{github.event.pull_request.head.ref}}
          fetch-depth: 0
      - name: Use Node.js 14.x
        uses: actions/setup-node@v1
        with:
          node-version: 14.x
      - name: Install Dependencies and setup for CI
        run: |
          npm ci
          npm run addDevCerts
      - name: Build
        run: npm run build
      - name: Calculate bundle size
        id: bundle
        uses: ./.github/actions/bundle
        with:
          CLIENT_MASTER_REPORT: ${{ env.CLIENT_MASTER_REPORT }}
          SERVER_MASTER_REPORT: ${{ env.SERVER_MASTER_REPORT }}
      - name: Test client code
        run: npm run test:jest:client -- --forceExit # force exit in case a test does not clean up after failure
      - name: Test server code
        if: ${{ success() || failure() }}
        run: npm run test:jest:server -- --forceExit # force exit in case a test does not clean up after failure
      - name: Coverage report
        id: coverage
        if: ${{ success() || failure() }}
        uses: ./.github/actions/coverage-report
      - name: Comment on PR
        if: ${{ success() || failure() }}
        uses: ./.github/actions/commenter
        with:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          BUNDLE_REPORT: ${{ steps.bundle.outputs.bundle_report }}
          TEST_COVERAGE_CLIENT: ${{ steps.coverage.outputs.test_coverage_client }}
          TEST_COVERAGE_SERVER: ${{ steps.coverage.outputs.test_coverage_server }}