feat: send x-internal-service-secret header on all RPC requests #2348
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Pre-Push Actions | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| permissions: {} | |
| env: | |
| GOUDA_SERVICE_URL: ${{ secrets.GOUDA_SERVICE_URL }} | |
| jobs: | |
| lint-and-test: | |
| name: lint-and-test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: bullfrogsec/bullfrog@dcde5841b19b7ef693224207a7fdec67fce604db # v0.8.3 | |
| with: | |
| # List of IPs to allow outbound connections to. | |
| # By default, only localhost and IPs required for the essential operations of Github Actions are allowed. | |
| # allowed-ips: | | |
| # List of domains to allow outbound connections to. | |
| # Wildcards are accepted. For example, if allowing `*.google.com`, this will allow `www.google.com`, `console.cloud.google.com` but not `google.com`. | |
| # By default, only domains required for essential operations of Github Actions and uploading job summaries are allowed. | |
| # Refer to https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners/about-github-hosted-runners#communication-requirements-for-github-hosted-runners-and-github for additional domains that should be allowed for additional Github Actions features. | |
| #allowed-domains: | |
| # The egress policy to enforce. Valid values are `audit` and `block`. | |
| # Default: audit | |
| egress-policy: audit | |
| - name: Check out Git repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| with: | |
| persist-credentials: false | |
| - name: Set up node | |
| uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 | |
| with: | |
| node-version: 20.x | |
| registry-url: https://registry.npmjs.org | |
| - name: Install dependencies | |
| run: | | |
| npm config set '//registry.npmjs.org/:_authToken' "${{ secrets.NPM_AUTH_TOKEN }}" \ | |
| && yarn install --frozen-lockfile | |
| - name: Run linters | |
| run: yarn lint | |
| - name: Run Build | |
| run: yarn build | |
| - name: Run swagger validation | |
| uses: readmeio/rdme@51a80867c45de15e2b41af0c4bd5bbc61b932804 # 51a80867c45de15e2b41af0c4bd5bbc61b932804 | |
| with: | |
| rdme: openapi:validate swagger.json | |
| - name: Setup Java | |
| uses: actions/setup-java@17f84c3641ba7b8f6deff6309fc4c864478f5d62 # v3 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '17' | |
| - name: Create Env File | |
| run: | | |
| touch .env | |
| echo "LABS_COSIGNER=0x0000000000000000000000000000000000000000" > .env | |
| echo "LABS_PRIORITY_COSIGNER=0x0000000000000000000000000000000000000000" >> .env | |
| echo "KMS_KEY_ID=testtest" >> .env | |
| cat .env | |
| - name: Check test coverage | |
| run: yarn coverage |