pdf.js/.github/workflows/ci.yml

name: CI
on: [push, pull_request]
permissions:
  contents: read

jobs:
  test:
    name: Test
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3

      - name: Use Node.js 16 LTS
        uses: actions/setup-node@v3
        with:
          node-version: '16'

      - name: Install Gulp
        run: npm install -g gulp-cli

      - name: Install other dependencies
        run: npm install -f

      - name: Run tests
        run: gulp ci-test
Switch from Travis CI to GitHub Actions 2020-12-20 06:01:10 +09:00			`name: CI`
			`on: [push, pull_request]`
chore: Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com> 2022-06-09 10:08:19 +09:00			`permissions:`
			`contents: read`

Switch from Travis CI to GitHub Actions 2020-12-20 06:01:10 +09:00			`jobs:`
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility. 2021-07-31 20:29:31 +09:00			`test:`
			`name: Test`
Switch from Travis CI to GitHub Actions 2020-12-20 06:01:10 +09:00			`runs-on: ubuntu-latest`
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility. 2021-07-31 20:29:31 +09:00
Switch from Travis CI to GitHub Actions 2020-12-20 06:01:10 +09:00			`steps:`
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility. 2021-07-31 20:29:31 +09:00			`- name: Checkout repository`
Update Checkout to version 3 Uses node 16 as default 2022-03-11 22:35:06 +09:00			`uses: actions/checkout@v3`
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility. 2021-07-31 20:29:31 +09:00
Upgrade Node.js to version 16 in the CI workflow Version 14 that we used before is now in maintenance mode, so we should upgrade to the most recent LTS version. Moreover, use the most recent `setup-node` workflow version and syntax; see https://github.com/actions/setup-node#usage. 2021-12-11 23:47:38 +09:00			`- name: Use Node.js 16 LTS`
Update GitHub Actions workflow steps to the most recent versions 2022-04-02 22:55:47 +09:00			`uses: actions/setup-node@v3`
Switch from Travis CI to GitHub Actions 2020-12-20 06:01:10 +09:00			`with:`
Upgrade Node.js to version 16 in the CI workflow Version 14 that we used before is now in maintenance mode, so we should upgrade to the most recent LTS version. Moreover, use the most recent `setup-node` workflow version and syntax; see https://github.com/actions/setup-node#usage. 2021-12-11 23:47:38 +09:00			`node-version: '16'`
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility. 2021-07-31 20:29:31 +09:00
			`- name: Install Gulp`
			`run: npm install -g gulp-cli`

			`- name: Install other dependencies`
Force-install npm packages to try and fix the repeated GitHub Action failures 2022-06-09 21:46:47 +09:00			`run: npm install -f`
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility. 2021-07-31 20:29:31 +09:00
			`- name: Run tests`
Remove the `npm test`-command This command was added all the way back when basic CI-support was first introduced (using Travis at the time), however it's never really intended to be used e.g. for local development. By having a `npm test`-command listed in the `package.json` file, there's a very real risk that someone unfamiliar with the code-base would only run that one and thus miss all the other (more important) test-suites[1]. Hence this patch which removes the `npm test`-command, and instead simply calls the relevant gulp-task[2] directly in the GitHub Actions configuration. --- [1] Which consist of the unit-tests (run in browsers), the font-tests (potentially), the reference-tests, and the integration-tests. [2] Which is also renamed slightly, to better fit its current usage. 2021-08-27 23:07:07 +09:00			`run: gulp ci-test`