Sakurai/pdf.js
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
9e0e67918f
pdf.js/.github/workflows/ci.yml

30 lines
536 B
YAML
Raw Normal View History

Switch from Travis CI to GitHub Actions
2020-12-20 06:01:10 +09:00
name: CI
on: [push, pull_request]
chore: Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
2022-06-09 10:08:19 +09:00
permissions:
contents: read
Switch from Travis CI to GitHub Actions
2020-12-20 06:01:10 +09:00
jobs:
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility.
2021-07-31 20:29:31 +09:00
test:
name: Test
Switch from Travis CI to GitHub Actions
2020-12-20 06:01:10 +09:00
runs-on: ubuntu-latest
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility.
2021-07-31 20:29:31 +09:00
Switch from Travis CI to GitHub Actions
2020-12-20 06:01:10 +09:00
steps:
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility.
2021-07-31 20:29:31 +09:00
- name: Checkout repository
Bump actions/checkout from 3 to 4 Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2023-09-04 21:51:59 +09:00
uses: actions/checkout@v4
Include the entire `git` history in the work-flows (issue 16366) Without this change we're not able to correctly determine the version number, please refer to https://github.com/actions/checkout#fetch-all-history-for-all-tags-and-branches
2023-04-28 18:42:19 +09:00
with:
fetch-depth: 0
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility.
2021-07-31 20:29:31 +09:00
Upgrade Node.js to version 18 in the CI workflow Version 16 that we used before is now in maintenance mode, so we should upgrade to the most recent LTS version. For more information on the Node.js release schedule please refer to https://github.com/nodejs/release#release-schedule.
2023-01-09 01:35:08 +09:00
- name: Use Node.js 18 LTS
Update GitHub Actions workflow steps to the most recent versions
2022-04-02 22:55:47 +09:00
uses: actions/setup-node@v3
Switch from Travis CI to GitHub Actions
2020-12-20 06:01:10 +09:00
with:
Upgrade Node.js to version 18 in the CI workflow Version 16 that we used before is now in maintenance mode, so we should upgrade to the most recent LTS version. For more information on the Node.js release schedule please refer to https://github.com/nodejs/release#release-schedule.
2023-01-09 01:35:08 +09:00
node-version: '18'
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility.
2021-07-31 20:29:31 +09:00
- name: Install Gulp
run: npm install -g gulp-cli
- name: Install other dependencies
Don't force-install packages in the CI job anymore In PR #16327 the `eslint-plugin-mozilla` package was updated so we no longer have to force-install packages, and the force-install flags for `npm install` were removed. However, the CI job was missing from this commit, which we fix here. In general force-installing packages shouldn't be necessary unless there are problems with dependencies, which we would like to know about, so especially in the CI job it seems like a good idea to not force-install packages to catch upcoming defects early on. Extends 19526d2322fabd4425688bb7c5504fa9ea015c5c.
2023-04-23 19:40:28 +09:00
run: npm install
Improve the CI workflow YAML file This makes it consistent with the GitHub Advanced Security file and, more importantly, ensures that all steps have a proper name for better visibility.
2021-07-31 20:29:31 +09:00
- name: Run tests
Remove the `npm test`-command This command was added all the way back when basic CI-support was first introduced (using Travis at the time), however it's never really intended to be used e.g. for local development. By having a `npm test`-command listed in the `package.json` file, there's a very real risk that someone unfamiliar with the code-base would only run that one and thus miss all the other (more important) test-suites[1]. Hence this patch which removes the `npm test`-command, and instead simply calls the relevant gulp-task[2] directly in the GitHub Actions configuration. --- [1] Which consist of the unit-tests (run in browsers), the font-tests (potentially), the reference-tests, and the integration-tests. [2] Which is also renamed slightly, to better fit its current usage.
2021-08-27 23:07:07 +09:00
run: gulp ci-test
Reference in New Issue Copy Permalink