Nuxt/.github/workflows/autofix.yml
StepSecurity Bot 4a64a64b9e
ci: apply security best practices to workflows (#21328)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: Daniel Roe <daniel@roe.dev>
2023-06-02 18:14:21 +01:00

43 lines
956 B
YAML

name: autofix.ci # needed to securely identify the workflow
on:
pull_request:
paths-ignore:
- "docs/**"
permissions:
contents: read
jobs:
code:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- run: corepack enable
- uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
with:
node-version: 20
cache: "pnpm"
- name: Install dependencies
run: pnpm install
- name: Dedupe dependencies
if: ${{ contains(github.head_ref, 'renovate') }}
run: pnpm dedupe
- name: Build (stub)
run: pnpm build:stub
- name: Lint (code)
run: pnpm lint:fix
- name: Test (unit)
run: pnpm test:unit -u
- name: Update bundle size
run: pnpm vitest run bundle -u
- uses: autofix-ci/action@8bc06253bec489732e5f9c52884c7cace15c0160