ci: setup github actions

.github/workflows/bearer.yml

@@ -0,0 +1,20 @@
+name: Bearer
+
+on:
+  push:
+    branches:
+      - main
+      - dev
+
+permissions:
+  contents: read
+
+jobs:
+  bearer:
+    name: Bearer
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run Report
+        id: report
+        uses: bearer/bearer-action@v2

.github/workflows/bearer_pr_check.yml

@@ -0,0 +1,20 @@
+name: Bearer PR Check
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+jobs:
+  bearer:
+    name: Bearer
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run Report
+        id: report
+        uses: bearer/bearer-action@v2
+        with:
+          diff: true

.github/workflows/deploy.yml

@@ -0,0 +1,121 @@
+name: Deploy
+on:
+  push:
+    branches:
+      - main
+      - dev
+  pull_request: {}
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  actions: write
+  contents: read
+
+jobs:
+    lint:
+      name: Lint
+      runs-on: ubuntu-latest
+      steps:
+        - name: Checkout
+          uses: actions/checkout@v4
+
+        - name: Setup node
+          uses: actions/setup-node@v3
+          with:
+            node-version: 20
+
+        - name: Install deps
+          uses: bahmutov/npm-install@v1
+
+        - name: Run lint
+          run: npm run lint
+    vitest:
+      name: Vitest
+      runs-on: ubuntu-latest
+      steps:
+        - name: Checkout
+          uses: actions/checkout@v4
+
+        - name: Setup node
+          uses: actions/setup-node@v3
+          with:
+            node-version: 20
+
+        - name: Install deps
+          uses: bahmutov/npm-install@v1
+
+        - name: Run unit tests
+          run: npm run test:coverage
+
+    playwright:
+      name: Playwright
+      runs-on: ubuntu-latest
+      steps:
+        - name: Checkout
+          uses: actions/checkout@v4
+
+        - name: Setup node
+          uses: actions/setup-node@v3
+          with:
+            node-version: 20
+
+        - name: Install deps
+          uses: bahmutov/npm-install@v1
+
+        - name: Install Playwright browsers
+          run: npm run test:e2e:install
+
+        - name: Build app
+          run: npm run build
+
+        - name: Run end-to-end tests
+          run: npm run test:e2e:run
+
+        - name: 📊 Upload report
+          uses: actions/upload-artifact@v3
+          if: always()
+          with:
+            name: playwright-report
+            path: playwright-report/
+            retention-days: 30
+
+    deploy:
+      name: Deploy
+      runs-on: ubuntu-22.04
+      needs: [lint, vitest, playwright]
+
+      if:
+        ${{ (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/dev') &&
+        github.event_name == 'push' }}
+
+      steps:
+        - name: Checkout repo
+          uses: actions/checkout@v3
+
+        - name: Read app name
+          uses: SebRollen/toml-action@v1.0.2
+          id: app_name
+          with:
+            file: 'fly.toml'
+            field: 'app'
+
+        - name: Setup Fly
+          uses: superfly/flyctl-actions/setup-flyctl@v1.4
+
+        - name: Deploy Staging
+          if: ${{ github.ref == 'refs/heads/dev' }}
+          run:
+            flyctl deploy --remote-only --build-arg COMMIT_SHA=${{ github.sha }}
+            --app ${{ steps.app_name.outputs.value }}-staging
+          env:
+            FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}
+
+        - name: Deploy Production
+          if: ${{ github.ref == 'refs/heads/main' }}
+          run:
+            flyctl deploy --remote-only --build-arg COMMIT_SHA=${{ github.sha }}
+          env:
+            FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}