pr.yml

name: PR Workflow

on:
  pull_request:
    branches:
      - main

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@master

      - name: Enable node
        uses: actions/setup-node@master
        with:
          node-version: 16.x
          registry-url: 'https://registry.npmjs.org'
          scope: '@wanews'
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Install Pulumi CLI
        uses: pulumi/action-install-pulumi-cli@v1

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }}
          aws-region: ap-southeast-2
          role-to-assume: ${{ secrets.AWS_DEV_ACCOUNT_ROLE }}
          role-skip-session-tagging: true
          role-duration-seconds: 3600

      - name: Install pnpm
        run: |
          npm i -g pnpm@8
          pnpm set verify-store-integrity false

      - name: pnpm install
        run: |
          pnpm store prune
          pnpm install --frozen-lockfile

      - name: Build packages
        run: pnpm run build-tsc

      - name: Lint types and code
        run: pnpm run lint --quiet

      - name: Run tests
        run: pnpm test

      - name: Package
        run: pnpm package