reusable-examples.yml

# Our reusable workflow files only use the `workflow_call` event and don't
# specify a `concurrency` limit so those things can be managed by the caller.
name: Reusable examples workflow

on: [workflow_call]

jobs:
  nestjs:
    name: NestJS
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nestjs
        run: npm ci

      - name: Build
        working-directory: examples/nestjs
        run: npm run build

  nestjs-fastify:
    name: NestJS + Fastify
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nestjs-fastify
        run: npm ci

      - name: Build
        working-directory: examples/nestjs-fastify
        run: npm run build

  nestjs-graphql:
    name: NestJS + GraphQL
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nestjs-graphql
        run: npm ci

      - name: Build
        working-directory: examples/nestjs-graphql
        run: npm run build

  nestjs-launchdarkly:
    name: NestJS + LaunchDarkly
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nestjs-launchdarkly
        run: npm ci

      - name: Build
        working-directory: examples/nestjs-launchdarkly
        run: npm run build

  nextjs-14-nextauth-4:
    name: Next.js 14 + NextAuth 4
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-14-nextauth-4
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-14-nextauth-4
        run: npm run build

  nextjs-app-dir-rate-limit:
    name: Next.js + App Router + Rate Limit
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-app-dir-rate-limit
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-app-dir-rate-limit
        run: npm run build

  nextjs-app-dir-validate-email:
    name: Next.js + App Router + Validate Email
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-app-dir-validate-email
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-app-dir-validate-email
        run: npm run build

  nextjs-authjs-5:
    name: Next.js + Auth.js 5
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-authjs-5
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-authjs-5
        env:
          AUTH_SECRET: TEST_SECRET
        run: npm run build

  nextjs-authjs-nosecone:
    name: Next.js + Auth.js 5 + Nosecone
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-authjs-nosecone
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-authjs-nosecone
        env:
          AUTH_SECRET: TEST_SECRET
        run: npm run build

  nextjs-bot-categories:
    name: Next.js + Bot categories
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-bot-categories
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-bot-categories
        run: npm run build

  nextjs-clerk-rate-limit:
    name: Next.js + Clerk + Rate Limit
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-clerk-rate-limit
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-clerk-rate-limit
        run: npm run build
        env:
          # This is the smallest dummy token that passes the Clerk validation
          NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY: pk_test_JA==

  nextjs-clerk-shield:
    name: Next.js + Clerk + Shield
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-clerk-shield
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-clerk-shield
        run: npm run build
        env:
          # This is the smallest dummy token that passes the Clerk validation
          NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY: pk_test_JA==

  nextjs-decorate:
    name: Next.js + Decorate
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-decorate
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-decorate
        run: npm run build

  nextjs-ip-details:
    name: Next.js + IP Details
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-ip-details
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-ip-details
        run: npm run build

  nextjs-openai:
    name: Next.js + OpenAI
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-openai
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-openai
        run: npm run build

  nextjs-pages-wrap:
    name: Next.js + Page Router + withArcjet
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-pages-wrap
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-pages-wrap
        run: npm run build

  nextjs-permit:
    name: Next.js + Permit
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-permit
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-permit
        run: npm run build
        env:
          # This is the smallest dummy token that passes the Clerk validation
          NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY: pk_test_JA==

  nextjs-sensitive-info:
    name: Next.js + Sensitive Info
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-sensitive-info
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-sensitive-info
        run: npm run build

  nextjs-server-actions:
    name: Next.js + Server Actions
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            fonts.googleapis.com:443
            fonts.gstatic.com:443
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nextjs-server-actions
        run: npm ci

      - name: Build
        working-directory: examples/nextjs-server-actions
        run: npm run build

  nodejs-hono-rate-limit:
    name: Node.js + Hono + Rate Limit
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/nodejs-hono-rate-limit
        run: npm ci

      - name: Build
        working-directory: examples/nodejs-hono-rate-limit
        run: npm run build

  remix-express:
    name: Remix + Express
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/remix-express
        run: npm ci

      - name: Build
        working-directory: examples/remix-express
        run: npm run build

  sveltekit:
    name: SvelteKit
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      # Environment security
      - name: Harden Runner
        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            github.com:443
            registry.npmjs.org:443

      # Checkout
      # Most toolchains require checkout first
      - name: Checkout
        uses: actions/checkout@v4

      # Language toolchains
      - name: Install Node
        uses: actions/setup-node@v4.1.0
        with:
          node-version: 20

      # Workflow

      - name: Install dependencies
        run: npm ci

      - name: Install example dependencies
        working-directory: examples/sveltekit
        run: npm ci

      - name: Build
        working-directory: examples/sveltekit
        run: npm run build