Merge pull request #1843 from alphagov/DGUK-290-move-markdown-render-… #1919

	on:
	push:
	branches:
	- main
	tags:
	- 'v*'
	pull_request:

	jobs:
	security-analysis:
	name: Security Analysis
	uses: alphagov/govuk-infrastructure/.github/workflows/brakeman.yml@main
	secrets: inherit
	permissions:
	contents: read
	security-events: write
	actions: read

	codeql-sast:
	name: CodeQL SAST scan
	uses: alphagov/govuk-infrastructure/.github/workflows/codeql-analysis.yml@main
	permissions:
	security-events: write

	dependency-review:
	name: Dependency Review scan
	uses: alphagov/govuk-infrastructure/.github/workflows/dependency-review.yml@main

	test:
	runs-on: ubuntu-latest
	services:
	redis:
	image: redis
	ports:
	- 6379:6379
	options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
	env:
	RAILS_ENV: test
	REDIS_URL: redis://localhost:6379/0
	steps:
	- name: Configure sysctl limits
	run: \|
	sudo swapoff -a
	sudo sysctl -w vm.swappiness=1
	sudo sysctl -w fs.file-max=262144
	sudo sysctl -w vm.max_map_count=262144

	- uses: actions/checkout@v4
	- uses: ruby/setup-ruby@v1
	- uses: actions/cache@v4
	with:
	path: vendor/bundle
	key: bundle-${{ hashFiles('**/Gemfile.lock') }}
	restore-keys: bundle
	- name: Check for cached node modules
	uses: actions/cache@v4
	with:
	path: node_modules
	key: yarn-${{ hashFiles('**/yarn.lock') }}
	restore-keys: yarn
	- run: yarn install --frozen-lockfile
	- uses: nanasess/setup-chromedriver@master
	- run: \|
	export DISPLAY=:99
	chromedriver --url-base=/wd/hub &
	sudo Xvfb -ac :99 -screen 0 1280x1024x24 > /dev/null 2>&1 & # optional
	- run: bundle install --jobs 4 --retry 3 --deployment
	- run: bundle exec rake

Provide feedback