SECURITY-100248 - Adding security workflow file with SAST scan #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| push: | |
| branches: | |
| - master | |
| pull_request: | |
| types: [ assigned, opened, synchronize, reopened, labeled ] | |
| name: ci | |
| jobs: | |
| test: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| node: [10, 12, 14, 16] | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: actions/setup-node@v1 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| - run: node --version | |
| # The first installation step ensures that all of our production | |
| # dependencies work on the given Node.js version, this helps us find | |
| # dependencies that don't match our engines field: | |
| - run: npm install --production --engine-strict --ignore-scripts --no-package-lock | |
| # Clean up the production install, before installing dev/production: | |
| - run: rm -rf node_modules | |
| - run: npm install | |
| - run: npm test | |
| env: | |
| MOCHA_THROW_DEPRECATION: false | |
| windows: | |
| runs-on: windows-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: actions/setup-node@v1 | |
| with: | |
| node-version: 12 | |
| - run: npm install | |
| - run: npm test | |
| env: | |
| MOCHA_THROW_DEPRECATION: false |