common.yml

name: Common CI

on:
  pull_request:
    branches: [ main ]

jobs:
  audit:
    name: Audit ${{ matrix.project }}
    runs-on: ubuntu-latest
    strategy:
      matrix:
        project: [apollo, athena, stitch]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 18.x
      - name: Audit NPM
        run: npm audit --production
        working-directory: ./packages/${{ matrix.project }}
        continue-on-error: true

  detect-secrets:
    name: Detect Secrets
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: 3.12
      - uses: actions/setup-node@v4
        with:
          node-version: 18.x
      - name: Install detect-secrets
        run: pip install --upgrade git+https://github.com/ibm/detect-secrets.git@0.13.1+ibm.59.dss#egg=detect-secrets
      - name: Install Lerna
        run: npm install -g lerna
      - name: Run detect-secrets
        run: lerna run detect-secrets --stream
        continue-on-error: true