ci(.github): make custom gha script accessible to workflow and don't … #4

	name: Bundle size Base
	on:
	push:
	branches:
	- master

	concurrency:
	# see https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#example-only-cancel-in-progress-jobs-or-runs-for-the-current-workflow
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	env:
	NX_PARALLEL: 6 # ubuntu-latest = 4-core CPU / 16 GB of RAM \| macos-14-xlarge (arm) = 6-core CPU / 14 GB of RAM
	NX_PREFER_TS_NODE: true
	NX_VERBOSE_LOGGING: true

	BROWSERSLIST_IGNORE_OLD_DATA: true

	jobs:
	bundle-size-base:
	runs-on: macos-14-xlarge
	permissions:
	contents: 'read'
	actions: 'read'
	id-token: 'write'

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Derive appropriate SHAs for base and head for `nx affected` commands
	uses: nrwl/nx-set-shas@v4
	with:
	main-branch-name: 'master'

	- uses: actions/setup-node@v4
	with:
	cache: 'yarn'
	node-version: '20'

	- run: yarn install --frozen-lockfile

	- name: Build all packages & create reports (non-PR)
	run: yarn nx run-many -t bundle-size --nxBail

	- name: Login via Azure CLI
	uses: azure/login@v2
	with:
	client-id: ${{ secrets.AZURE_CLIENT_ID }}
	tenant-id: ${{ secrets.AZURE_TENANT_ID }}
	subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

	- name: Upload report
	uses: azure/cli@v2
	with:
	azcliversion: latest
	inlineScript: \|
	yarn monosize upload-report --branch=${{ github.ref }} --commit-sha ${{ github.sha }}
	env:
	AZCOPY_AUTO_LOGIN_TYPE: 'AZCLI'
	SYSTEM_ACCESSTOKEN: ${{ secrets.GITHUB_TOKEN }}
	BUNDLESIZE_ACCOUNT_NAME: ${{ secrets.BUNDLESIZE_ACCOUNT_NAME }}

Provide feedback