npm-audit-pipeline/.github/workflows/build_and_test.yml

Using npm audit in deployment pipelines

name: Build

on: [push]

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2
      - name: install dependencies
        run: npm i
      - name: run lint
        run: npm run lint
  tsc:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2
      - name: install dependencies
        run: npm i
      - name: run tsc
        run: npm run tsc
  test:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2
      - name: install dependencies
        run: npm i
      - name: run test
        run: npm run test
  dryRunLinux:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2
      - name: install dependencies
        run: npm i
      - name: run build
        run: npm run build
      - name: run npm link
        run: npm link
      - name: npm i on demo/npm
        run: npm i
        working-directory: demo/npm
      - name: link npm-audit-pipeline package
        run: npm link npm-audit-pipeline
        working-directory: demo/npm
      - name: run package-audit
        run: npm run package-audit
        working-directory: demo/npm
  dryRunLinuxPnpm:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2
      - name: install pnpm
        run: npm i pnpm -g
      - name: install dependencies
        run: pnpm i pnpm
      - name: run build
        run: pnpm run build
      - name: pnpm i on demo/pnpm
        run: pnpm i
        working-directory: demo/pnpm
      - name: link npm-audit-pipeline package
        run: pnpm link ../../
        working-directory: demo/pnpm
      - name: run package-audit
        run: pnpm run package-audit
        working-directory: demo/pnpm
  dryRunLinuxYarn:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2
      - name: install yarn
        run: npm i yarn -g
      - name: install dependencies
        run: yarn install
      - name: run build
        run: yarn run build
      - name: run npm link
        run: npm link
      - name: yarn install on demo/yarn
        run: yarn install
        working-directory: demo/yarn
      - name: link npm-audit-pipeline package
        run: npm link npm-audit-pipeline
        working-directory: demo/yarn
      - name: run package-audit
        run: yarn package-audit
        working-directory: demo/yarn
  dryRunMacOS:
    runs-on: macos-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2
      - name: install dependencies
        run: npm i
      - name: run build
        run: npm run build
      - name: run npm link
        run: npm link
      - name: npm i on demo/npm
        run: npm i
        working-directory: demo/npm
      - name: link npm-audit-pipeline package
        run: npm link npm-audit-pipeline
        working-directory: demo/npm
      - name: run package-audit
        run: npm run package-audit
        working-directory: demo/npm
  dryRunWindows:
    runs-on: windows-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2
      - name: install dependencies
        run: npm i
      - name: run build
        run: npm run build
      - name: run npm link
        run: npm link
      - name: npm i on demo/npm
        run: npm i
        working-directory: demo/npm
      - name: link npm-audit-pipeline package
        run: npm link npm-audit-pipeline
        working-directory: demo/npm
      - name: run package-audit
        run: npm run package-audit
        working-directory: demo/npm