integrity-checks.yml

# Runs linter, audits third party depedencies, tests compilation, runs tests, and uploads codecov report
name: Integrity Checks

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

jobs:
  test:
    defaults:
      run:
        shell: bash
    runs-on: ubuntu-latest
    steps:
      - name: Checkout source
        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2

      - name: Set up Node.js
        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
        with:
          node-version: 20

      - name: Install dependencies
        run: npm ci

      - name: Report known vulnerabilities
        run: npm run lint

      - name: Run audit checks
        run: npm audit
      
      - name: Test build
        run: npm run build

      - name: start containerized dbs
        run: |
          sudo apt update
          sudo apt install sqlite3
          ./scripts/start-databases
      
      - name: Run tests
        run: npm run test-coverage

      - name: Upload coverage reports to Codecov
        uses: codecov/codecov-action@v3
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}