App secret key security bug #1643
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: 🔬 Validate | |
| on: | |
| workflow_call: | |
| pull_request: {} | |
| env: | |
| VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }} | |
| VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }} | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| validate: | |
| name: ⬣ Validate | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: 🛑 Cancel Previous Runs | |
| uses: styfle/cancel-workflow-action@0.9.1 | |
| - name: ⬇️ Checkout repo | |
| uses: actions/checkout@v3 | |
| - name: ⎔ Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: 18.18.2 | |
| - uses: pnpm/action-setup@v2.0.1 | |
| with: | |
| version: 8.9.2 | |
| - name: 👀 Env | |
| run: | | |
| echo "Event name: ${{ github.event_name }}" | |
| echo "Git ref: ${{ github.ref }}" | |
| echo "GH actor: ${{ github.actor }}" | |
| echo "SHA: ${{ github.sha }}" | |
| VER=`node --version`; echo "Node ver: $VER" | |
| VER=`pnpm --version`; echo "pnpm ver: $VER" | |
| - name: Install Vercel CLI | |
| run: npm install --global vercel@latest | |
| - name: Pull Vercel Environment Information | |
| run: vercel pull --yes --environment=preview --token=${{ secrets.VERCEL_TOKEN }} | |
| - name: Move .env file | |
| run: | | |
| cp .vercel/.env.preview.local .env | |
| - name: 📥 Download deps | |
| run: pnpm install | |
| - name: 🔬 Generate Types | |
| run: pnpm run generate:types | |
| - name: 🔬 Lint | |
| run: pnpm run lint:fix | |
| - name: 🔎 Type check | |
| run: pnpm run typecheck | |
| - name: ⚡ Run vitest | |
| run: pnpm run test:unit:run | |
| - name: "Post test coverage" | |
| if: always() # Also generate the report if tests are failing | |
| uses: davelosert/vitest-coverage-report-action@v1 |