ShadowCode/.github/workflows/ci.yml at main · Shadowfetchapps/ShadowCode · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
name: Checks
on:
  push:
    branches: [main]
  pull_request:
permissions:
  contents: read
jobs:
  ui:
    runs-on: ubuntu-24.04
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: ui/package-lock.json
      - run: npm --prefix ui ci
      - run: npm --prefix ui run typecheck
      - run: npm --prefix ui test
      - run: npm --prefix ui run build
      - name: End-to-end interface tests
        working-directory: ui
        run: npx playwright install --with-deps chromium && npm run test:e2e
      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        if: failure()
        with:
          name: browser-diagnostics
          path: ui/test-results
  packaging-scripts:
    runs-on: ubuntu-24.04
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
        with:
          node-version: '22'
      - name: No credentials in tracked files
        run: |
          node scripts/check-secrets.mjs
          node --test scripts/test-check-secrets.mjs
      - name: Verify publisher authentication and private release snapshots
        run: node --test scripts/test-native-release-auth.mjs
      - name: Managed llama.cpp packaging (pins, notices, relative links, deb repack)
        run: node --test scripts/test-llama-runtime.mjs scripts/test-llama-build-inputs.mjs
      - name: Packaging PATH ignores host node hijacks
        run: node --test scripts/test-native-packaging-env.mjs
      - name: Pinned-source failures and mirror recovery
        run: node --test scripts/test-native-source-fetch.mjs
      - name: Installer replacement, runtime swap and checksum refusal
        run: |
          node --test --test-reporter=tap scripts/test-install-auth.mjs
          bash scripts/test-install-appimage.sh