mirror of
https://github.com/affaan-m/everything-claude-code.git
synced 2026-03-31 06:03:29 +08:00
Pin all GitHub Actions to commit SHAs instead of mutable version tags across ci.yml, release.yml, maintenance.yml, and all reusable workflows. This prevents supply-chain attacks via tag hijacking. Add the required Skills section to CLAUDE.md mapping project files (README.md, .github/workflows/*.yml) to their respective review skills.
143 lines
4.8 KiB
YAML
143 lines
4.8 KiB
YAML
name: Reusable Test Workflow
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
os:
|
|
description: 'Operating system'
|
|
required: false
|
|
type: string
|
|
default: 'ubuntu-latest'
|
|
node-version:
|
|
description: 'Node.js version'
|
|
required: false
|
|
type: string
|
|
default: '20.x'
|
|
package-manager:
|
|
description: 'Package manager to use'
|
|
required: false
|
|
type: string
|
|
default: 'npm'
|
|
|
|
jobs:
|
|
test:
|
|
name: Test
|
|
runs-on: ${{ inputs.os }}
|
|
timeout-minutes: 10
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
|
|
with:
|
|
node-version: ${{ inputs.node-version }}
|
|
|
|
- name: Setup pnpm
|
|
if: inputs.package-manager == 'pnpm'
|
|
uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4
|
|
with:
|
|
version: latest
|
|
|
|
- name: Setup Yarn (via Corepack)
|
|
if: inputs.package-manager == 'yarn'
|
|
shell: bash
|
|
run: |
|
|
corepack enable
|
|
corepack prepare yarn@stable --activate
|
|
|
|
- name: Setup Bun
|
|
if: inputs.package-manager == 'bun'
|
|
uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
|
|
|
|
- name: Get npm cache directory
|
|
if: inputs.package-manager == 'npm'
|
|
id: npm-cache-dir
|
|
shell: bash
|
|
run: echo "dir=$(npm config get cache)" >> $GITHUB_OUTPUT
|
|
|
|
- name: Cache npm
|
|
if: inputs.package-manager == 'npm'
|
|
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
|
|
with:
|
|
path: ${{ steps.npm-cache-dir.outputs.dir }}
|
|
key: ${{ runner.os }}-node-${{ inputs.node-version }}-npm-${{ hashFiles('**/package-lock.json') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-node-${{ inputs.node-version }}-npm-
|
|
|
|
- name: Get pnpm store directory
|
|
if: inputs.package-manager == 'pnpm'
|
|
id: pnpm-cache-dir
|
|
shell: bash
|
|
run: echo "dir=$(pnpm store path)" >> $GITHUB_OUTPUT
|
|
|
|
- name: Cache pnpm
|
|
if: inputs.package-manager == 'pnpm'
|
|
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
|
|
with:
|
|
path: ${{ steps.pnpm-cache-dir.outputs.dir }}
|
|
key: ${{ runner.os }}-node-${{ inputs.node-version }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-node-${{ inputs.node-version }}-pnpm-
|
|
|
|
- name: Get yarn cache directory
|
|
if: inputs.package-manager == 'yarn'
|
|
id: yarn-cache-dir
|
|
shell: bash
|
|
run: |
|
|
# Try Yarn Berry first, fall back to Yarn v1
|
|
if yarn config get cacheFolder >/dev/null 2>&1; then
|
|
echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
|
|
else
|
|
echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
|
|
fi
|
|
|
|
- name: Cache yarn
|
|
if: inputs.package-manager == 'yarn'
|
|
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
|
|
with:
|
|
path: ${{ steps.yarn-cache-dir.outputs.dir }}
|
|
key: ${{ runner.os }}-node-${{ inputs.node-version }}-yarn-${{ hashFiles('**/yarn.lock') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-node-${{ inputs.node-version }}-yarn-
|
|
|
|
- name: Cache bun
|
|
if: inputs.package-manager == 'bun'
|
|
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
|
|
with:
|
|
path: ~/.bun/install/cache
|
|
key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lockb') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-bun-
|
|
|
|
# COREPACK_ENABLE_STRICT=0 allows pnpm to install even though
|
|
# package.json declares "packageManager": "yarn@..."
|
|
- name: Install dependencies
|
|
shell: bash
|
|
env:
|
|
COREPACK_ENABLE_STRICT: '0'
|
|
run: |
|
|
case "${{ inputs.package-manager }}" in
|
|
npm) npm ci ;;
|
|
pnpm) pnpm install --no-frozen-lockfile ;;
|
|
# Yarn Berry (v4+) removed --ignore-engines; engine checking is no longer a core feature
|
|
yarn) yarn install ;;
|
|
bun) bun install ;;
|
|
*) echo "Unsupported package manager: ${{ inputs.package-manager }}" && exit 1 ;;
|
|
esac
|
|
|
|
- name: Run tests
|
|
run: node tests/run-all.js
|
|
env:
|
|
CLAUDE_CODE_PACKAGE_MANAGER: ${{ inputs.package-manager }}
|
|
|
|
- name: Upload test artifacts
|
|
if: failure()
|
|
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
|
|
with:
|
|
name: test-results-${{ inputs.os }}-node${{ inputs.node-version }}-${{ inputs.package-manager }}
|
|
path: |
|
|
tests/
|
|
!tests/node_modules/
|