build(deps): Bump aws-cdk-lib from 2.145.0 to 2.163.1 #842
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: CI | |
on: | |
push: | |
branches: | |
- main | |
pull_request: | |
branches: | |
- "**" | |
permissions: read-all | |
concurrency: | |
group: ${{ github.workflow }}-${{ github.ref }} | |
cancel-in-progress: ${{ github.ref != 'refs/heads/main' }} | |
jobs: | |
continuous-integration: | |
name: Standard NodeJS checks | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
- name: Set up Node 20.x | |
uses: actions/setup-node@v4 | |
with: | |
node-version: "20.x" | |
cache: "yarn" | |
- name: Install Node dependencies | |
run: yarn install --frozen-lockfile | |
- name: Check uncommitted formatting changes | |
run: yarn prettier . --check | |
- name: Check for linting errors | |
run: yarn lint | |
- name: Typecheck | |
run: yarn typecheck | |
- name: Test | |
run: yarn test --ci | |
deployment-check: | |
name: Check deployment artifacts | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
- name: Set up Node 20.x | |
uses: actions/setup-node@v4 | |
with: | |
node-version: "20.x" | |
cache: "yarn" | |
- name: Install Node dependencies for deployment | |
run: yarn install --production | |
env: | |
HUSKY: 0 | |
- name: Synthesize CloudFormation template and assets | |
run: yarn synth | |
- name: Check synthesized CloudFormation template with Checkov | |
uses: bridgecrewio/checkov-action@master | |
with: | |
directory: cdk.out | |
framework: cloudformation | |
- name: Check Github Actions configuration with Checkov | |
uses: bridgecrewio/checkov-action@master | |
with: | |
directory: .github | |
framework: github_actions | |
shell-check: | |
name: Check shell scripts | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
- uses: ludeeus/[email protected] | |
with: | |
ignore_paths: >- | |
.husky/_ | |
node_modules |