ci: declare minimum permissions on workflow files #1325
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| pull_request: | |
| branches: | |
| - 'main' | |
| push: | |
| branches: | |
| - 'main' | |
| permissions: | |
| contents: read | |
| jobs: | |
| API-diff: | |
| strategy: | |
| matrix: | |
| module: ["ConfidenceProvider", "Confidence"] | |
| runs-on: macOS-latest | |
| steps: | |
| - name: install sourcekitten | |
| run: brew install sourcekitten | |
| - uses: actions/checkout@v3 | |
| - name: Run public API diff | |
| run: scripts/api_diff.sh ${{ matrix.module }} | |
| Unit-Tests: | |
| runs-on: macOS-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Build and Run Unit Tests | |
| run: scripts/run_tests.sh | |
| Integration-Tests: | |
| runs-on: macOS-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Build and Run Integration Tests | |
| env: | |
| CLIENT_TOKEN: ${{ secrets.CONFIDENCE_CLIENT_TOKEN }} | |
| run: | | |
| if [ -z "$CLIENT_TOKEN" ]; then | |
| echo "Secret CONFIDENCE_CLIENT_TOKEN is not available. Skipping integration tests." | |
| exit 0 | |
| fi | |
| scripts/run_integration_tests.sh $CLIENT_TOKEN | |
| DemoApp: | |
| runs-on: macOS-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Build Demo App | |
| run: ConfidenceDemoApp/scripts/build.sh | |
| SwiftLint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: GitHub Action for SwiftLint | |
| uses: norio-nomura/action-swiftlint@3.2.1 | |
| with: | |
| args: --strict --config .swiftlint.yml |