Add host 1798 to excluded storage restrictions (#54333) #29500
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: JavaScript Tests | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - patch-* | |
| - prepare-* | |
| pull_request: | |
| paths: | |
| - assets/** | |
| - frontend/** | |
| - package.json | |
| - yarn.lock | |
| - webpack.config.js | |
| - tsconfig.json | |
| - tools/software/icons/** | |
| # This allows a subsequently queued workflow run to interrupt previous runs | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.ref }} | |
| cancel-in-progress: true | |
| defaults: | |
| run: | |
| # fail-fast using bash -eo pipefail. See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#exit-codes-and-error-action-preference | |
| shell: bash | |
| permissions: | |
| contents: read | |
| jobs: | |
| test-js: | |
| strategy: | |
| matrix: | |
| os: [ubuntu-4core] | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| # Set the Node.js version | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout Code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Node.js | |
| uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 | |
| with: | |
| node-version-file: package.json | |
| - name: JS Dependency Cache | |
| id: js-cache | |
| uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 | |
| with: | |
| path: | | |
| **/node_modules | |
| key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }} | |
| - name: Install JS Dependencies | |
| if: steps.js-cache.outputs.cache-hit != 'true' | |
| run: make deps-js | |
| - name: Run JS Tests | |
| run: | | |
| yarn test:ci | |
| - name: Upload to Codecov | |
| uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0 | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| flags: frontend | |
| lint-js: | |
| strategy: | |
| matrix: | |
| os: [ubuntu-4core] | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| # Set the Node.js version | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout Code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Node.js | |
| uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 | |
| with: | |
| node-version-file: package.json | |
| - name: JS Dependency Cache | |
| id: js-cache | |
| uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 | |
| with: | |
| path: | | |
| **/node_modules | |
| key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }} | |
| - name: Install JS Dependencies | |
| if: steps.js-cache.outputs.cache-hit != 'true' | |
| run: make deps-js | |
| # yarn lint rather than make lint-js: make lint-js also runs the icon | |
| # check, which has its own job below. Running it in both places annotates | |
| # every finding twice and fails two jobs for one problem. | |
| - name: Run JS Linting | |
| run: | | |
| yarn lint | |
| - name: Run prettier formatting check | |
| run: | | |
| yarn prettier:check | |
| lint-icons: | |
| strategy: | |
| matrix: | |
| os: [ubuntu-4core] | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout Code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Node.js | |
| uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 | |
| with: | |
| node-version-file: package.json | |
| # Its own job so it gets its own annotation budget: GitHub allows 10 | |
| # warning annotations per job, and eslint's warnings in lint-js use all | |
| # of them before this could report. No dependency install needed — the | |
| # check reads PNG headers with only node's fs and path. | |
| - name: Check Fleet-maintained app icons | |
| run: | | |
| node tools/software/icons/check-icons.js |