Skip to content

chore(deps): bump the npm_and_yarn group across 3 directories with 1 update #206

chore(deps): bump the npm_and_yarn group across 3 directories with 1 update

chore(deps): bump the npm_and_yarn group across 3 directories with 1 update #206

Workflow file for this run

name: TrustSignal CI
on:
push:
branches:
- master
pull_request:
branches:
- master
jobs:
lint:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: '20'
cache: npm
- name: Install dependencies
run: npm ci
- name: Run lint
run: npm run lint
typecheck:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: '20'
cache: npm
- name: Install dependencies
run: npm ci
- name: Type check
run: npm run typecheck
test:
runs-on: ubuntu-latest
env:
DATABASE_URL: ${{ secrets.DATABASE_URL }}
TRUSTSIGNAL_JWT_SECRET: ${{ secrets.TRUSTSIGNAL_JWT_SECRET }}
TRUSTSIGNAL_JWT_SECRETS: ${{ secrets.TRUSTSIGNAL_JWT_SECRETS }}
POLYGON_RPC_URL: ${{ secrets.POLYGON_RPC_URL }}
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: '20'
cache: npm
- name: Install dependencies
run: npm ci
- name: Run unit/integration tests with coverage
run: npx vitest run --coverage
web-build:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: '20'
cache: npm
- name: Install dependencies
run: npm ci
- name: Build releasable web surface
run: npm --workspace apps/web run build
signed-receipt-smoke:
runs-on: ubuntu-latest
services:
postgres:
image: postgres:16
env:
POSTGRES_DB: trustsignal_signed_receipt_smoke
POSTGRES_USER: postgres
POSTGRES_HOST_AUTH_METHOD: trust
ports:
- 5432:5432
options: >-
--health-cmd "pg_isready -U postgres -d trustsignal_signed_receipt_smoke"
--health-interval 10s
--health-timeout 5s
--health-retries 5
env:
DATABASE_URL: postgresql://postgres@127.0.0.1:5432/trustsignal_signed_receipt_smoke?sslmode=disable
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: '20'
cache: npm
- name: Install dependencies
run: npm ci
- name: Run signed-receipt smoke test
run: cd apps/api && npx vitest run --config vitest.config.ts src/v2-integration.test.ts
rust-build:
runs-on: ubuntu-latest
defaults:
run:
working-directory: circuits/non_mem_gadget
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup Rust
uses: dtolnay/rust-toolchain@stable
- name: Build Halo2 verifier
run: cargo build --release
- name: Run Halo2 tests
run: cargo test
secret-scan:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Install gitleaks
run: |
GITLEAKS_VERSION=8.24.2
curl -sSL "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" \
| tar -xz
sudo mv gitleaks /usr/local/bin/gitleaks
- name: Gitleaks scan
run: gitleaks git . --redact --no-banner
dependency-audit:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: '20'
cache: npm
- name: Install dependencies
run: npm ci
- name: Audit production dependencies
run: npm audit --omit=dev --audit-level=high
verify-artifact-action:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: 22
- name: Check source syntax
working-directory: github-actions/trustsignal-verify-artifact
run: npm run check
- name: Verify dist alignment
working-directory: github-actions/trustsignal-verify-artifact
run: npm run check:dist
- name: Run local contract tests
working-directory: github-actions/trustsignal-verify-artifact
run: npm run test:local