proton-pass-community-mcp/.github/workflows/ci.yml at ea35cdca854409a864d98bd17307419a1c0e13df · hesreallyhim/proton-pass-community-mcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
name: CI

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

permissions:
  contents: read

jobs:
  check:
    name: Lint, Typecheck, Test
    runs-on: ubuntu-latest
    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
        with:
          egress-policy: audit

      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

      - name: Setup Node.js 24
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 24
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Generate complexity report
        run: |
          mkdir -p .tmp
          npm run analyze:complexity -- src --json-out .tmp/complexity-report.json

      - name: Complexity threshold warnings
        run: npm run check:complexity-thresholds -- --report .tmp/complexity-report.json

      - name: Enforce complexity thresholds on main
        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
        run: npm run check:complexity-thresholds -- --report .tmp/complexity-report.json --enforce

      - name: Run checks
        run: npm run check

      - name: Verify coverage report
        run: test -s coverage/lcov.info

      - name: Upload coverage to Codacy
        if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
        uses: codacy/codacy-coverage-reporter-action@89d6c85cfafaec52c72b6c5e8b2878d33104c699 # v1.3.0
        with:
          api-token: ${{ secrets.CODACY_API_TOKEN }}
          coverage-reports: coverage/lcov.info