feat: add security headers #2453

	name: Playwright Tests
	env:
	SECRET_KEY: insecure_test_key
	PORT: 8001
	CONTRACTS_API_URL: https://contracts.staging.canonical.com
	STRIPE_PUBLISHABLE_KEY: pk_test_yndN9H0GcJffPe0W58Nm64cM00riYG4N46
	CAPTCHA_TESTING_API_KEY: 6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI

	on:
	pull_request:
	branches: [ main ]

	jobs:
	run-playwright:
	if: github.repository == 'canonical/ubuntu.com'
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 20

	- name: Install dependencies
	run: yarn install --immutablee

	- name: Install dependencies
	run: npm install -g yarn && yarn

	- name: Install dotrun
	run: sudo pip3 install dotrun requests==2.31.0 # requests version is pinned to avoid breaking changes, can be removed once issue is resolved: https://github.com/docker/docker-py/issues/3256resolved: https://github.com/docker/docker-py/issues/3256

	- name: Install dependencies
	run: \|
	sudo chmod -R 777 .
	dotrun install

	- name: Build assets
	run: dotrun build

	- name: Run dotrun
	run: \|
	dotrun &
	curl --head --fail --retry-delay 1 --retry 30 --retry-connrefused http://localhost:8001

	- name: Install Playwright Browsers
	run: yarn playwright install --with-deps

	- name: Run Playwright tests
	env:
	PLAYWRIGHT_USER_ID: ${{ secrets.PLAYWRIGHT_USER_ID }}
	PLAYWRIGHT_USER_PASSWORD : ${{ secrets.PLAYWRIGHT_USER_PASSWORD }}
	run: yarn playwright test

Provide feedback