ci.yml

name: CI

on:
    pull_request:
        types: [opened, reopened, synchronize]

jobs:
    lint:
        name: Lint Changed Files
        runs-on: ubuntu-latest
        steps:
            - name: Harden Runner
              uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
              with:
                  egress-policy: audit

            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
              with:
                  fetch-depth: 0
            - uses: ./.github/actions/setup
            - uses: ./.github/actions/lint
              with:
                  WORKFLOW: 'ci'
    test:
        name: Test
        runs-on: ubuntu-latest
        steps:
            - name: Harden Runner
              uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
              with:
                  egress-policy: audit

            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
            - uses: ./.github/actions/setup
            - uses: ./.github/actions/test
    demo:
        name: Build & Deploy Demo
        runs-on: ubuntu-latest
        permissions:
            pull-requests: write
            id-token: write
            contents: read
        steps:
            - name: Harden Runner
              uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
              with:
                  egress-policy: audit

            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
            - uses: ./.github/actions/setup
            - uses: ./.github/actions/build
            - uses: ./.github/actions/deploy
              id: deploy-demo
              with:
                  AWS_ROLE: ${{ secrets.AWS_ROLE }}
                  AWS_REGION: ${{ secrets.AWS_REGION }}
                  AWS_BUCKET: ${{ secrets.AWS_BUCKET }}
            - name: Add demo link as a commment on the PR
              uses: ./.github/actions/comment-on-pr
              with:
                  message: ':heavy_check_mark: [Live demo of your latest successful build available here](https://plasma.coveo.com/feature/${{ steps.deploy-demo.outputs.demo-output-path }}/).'
                  avoidRepostsWith: Live demo of your latest successful build available here