ci.yml

name: CI
on:
  pull_request:
    branches: [master]
    types: [opened, edited, synchronize, reopened]
  push:
    branches: [master]
permissions:
  contents: read

jobs:
  CI:
    runs-on: ubuntu-latest
    name: CI
    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
        with:
          egress-policy: audit

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
        with:
          node-version-file: '.nvmrc'
          cache: 'npm'
      - run: npm ci
      - run: npm run build
      - run: npm run test