GitHub Actions Workflow Builder — DevOps & CI/CD

.github/workflows/ci.ymlYAML

name: CI & Test Pipeline

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  security-audit:
    name: Security Vulnerability Scan
    runs-on: ubuntu-latest
    permissions:
      contents: read
      security-events: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Run Trivy vulnerability scanner
        uses: aquasecurity/trivy-action@master
        with:
          scan-type: 'fs'
          ignore-unfixed: true
          severity: 'CRITICAL,HIGH'
          format: 'table'

  build-and-test:
    name: Build, Lint & Test
    runs-on: ubuntu-latest
    needs: [security-audit]
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Run code linter
        run: npm run lint

      - name: Run test suite
        run: npm test -- --passWithNoTests

      - name: Build production bundle
        run: npm run build

Ready for commit to .github/workflows/ci.yml59 lines · 1245 chars