Merged
Conversation
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
Comment on lines
+15
to
+151
| timeout-minutes: 60 | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@v4 | ||
|
|
||
| # Cache pnpm store | ||
| - name: Cache pnpm store | ||
| uses: actions/cache@v3 | ||
| with: | ||
| path: ~/.pnpm-store | ||
| key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }} | ||
| restore-keys: | | ||
| ${{ runner.os }}-pnpm-store- | ||
|
|
||
| # Cache Playwright browsers | ||
| - name: Cache Playwright browsers | ||
| uses: actions/cache@v3 | ||
| with: | ||
| path: ~/.cache/ms-playwright | ||
| key: ${{ runner.os }}-playwright-browsers-v1 | ||
| restore-keys: | | ||
| ${{ runner.os }}-playwright-browsers- | ||
|
|
||
| # Set up pnpm (must be before install) | ||
| - name: Set up pnpm | ||
| uses: pnpm/action-setup@v4 | ||
|
|
||
| - name: Set up Node | ||
| uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: 20 | ||
| cache: 'pnpm' | ||
| cache-dependency-path: '**/pnpm-lock.yaml' | ||
|
|
||
| - name: Set up JDK | ||
| uses: actions/setup-java@v3 | ||
| with: | ||
| distribution: 'temurin' | ||
| java-version: '21' | ||
|
|
||
| # Install all dependencies | ||
| - name: Install dependencies | ||
| run: pnpm install | ||
|
|
||
| - name: Generate .backend.local | ||
| run: | | ||
| cat <<EOF > apps/backend/.env.local | ||
| POSTGRES_PASSWORD=flowinquiry123 | ||
| # Secret for testing on CI only | ||
| JWT_BASE64_SECRET=VDk3amx5ZjNjbVZKc256RXoxRGpCTklwS0FGbmltMDNQNGQ0Z2VaOXRwYTlEc0VBVG05bTlJUXRzMWE0VG9CdEJ2Mkk2TzJzZEEwZU5hMWg5WG1mcTU1R0hG | ||
| EOF | ||
|
|
||
| - name: Generate .env.local for frontend | ||
| run: | | ||
| cat <<EOF > apps/frontend/.env.local | ||
| NEXT_PUBLIC_BASE_URL=http://localhost:8080 | ||
| BACK_END_URL=http://localhost:8080 | ||
| # Secret for testing on CI only | ||
| AUTH_SECRET=mPigMZXj1qRQKKnv8ILE1iQ+uexLD3oRD1PSsy/NejtCBovKwCpMV8sSFHOfqme2pc/UV9ALqlECSYZGt4gQkw== | ||
| EOF | ||
|
|
||
| # Start and wait for PostgreSQL | ||
| - name: Start PostgreSQL | ||
| run: pnpm docker:up | ||
|
|
||
| - name: Wait for PostgreSQL | ||
| run: | | ||
| echo "Waiting for PostgreSQL to be ready..." | ||
| timeout 60s bash -c ' | ||
| until docker exec $(docker ps -q --filter name=postgresql) pg_isready -U flowinquiry; do | ||
| echo "Waiting for pg_isready..." | ||
| sleep 2 | ||
| done | ||
| ' | ||
|
|
||
| # Conditionally start backend | ||
| - name: Start backend | ||
| if: inputs.run_backend == true | ||
| run: | | ||
| ./gradlew :apps:backend:server:bootRun > backend.log 2>&1 & | ||
| echo "Waiting for backend..." | ||
| timeout 120s bash -c ' | ||
| until curl -sf http://localhost:8080/actuator/health; do | ||
| echo "Waiting for backend..." | ||
| sleep 2 | ||
| done | ||
| ' | ||
|
|
||
| # Conditionally start frontend | ||
| - name: Start frontend | ||
| if: inputs.run_frontend == true | ||
| run: | | ||
| pnpm dev:frontend > frontend.log 2>&1 & | ||
| echo "Waiting for frontend..." | ||
| timeout 60s bash -c ' | ||
| until curl -sf http://localhost:3000; do | ||
| echo "Waiting for frontend..." | ||
| sleep 2 | ||
| done | ||
| ' || (echo "Frontend failed to start. Dumping logs:" && cat frontend.log && exit 1) | ||
|
|
||
| # Install Playwright and run tests | ||
| - name: Install Playwright Browsers | ||
| working-directory: ./apps/frontend | ||
| run: pnpm playwright:install --with-deps | ||
|
|
||
| - name: Run Playwright tests | ||
| id: run_tests | ||
| working-directory: ./apps/frontend | ||
| run: pnpm test | ||
|
|
||
| # Upload HTML report for PR review | ||
| - name: Upload Playwright report | ||
| if: always() | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: playwright-report | ||
| path: apps/frontend/playwright-report/ | ||
| retention-days: 30 | ||
|
|
||
| # Summarize test result in GitHub Actions UI | ||
| - name: Summarize Playwright Results | ||
| if: always() | ||
| run: | | ||
| echo "### Playwright Report" >> $GITHUB_STEP_SUMMARY | ||
| echo "- ✅ [Download Report](./apps/frontend/playwright-report/index.html)" >> $GITHUB_STEP_SUMMARY | ||
|
|
||
| # Graceful shutdown of all services | ||
| - name: Shutdown services | ||
| if: always() | ||
| run: | | ||
| echo "Stopping backend..." | ||
| pkill -f "apps:backend:server:bootRun" || true | ||
| echo "Stopping frontend..." | ||
| pkill -f "pnpm dev" || true | ||
| echo "Stopping Docker services..." | ||
| pnpm docker:down |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 10 months ago
To fix the issue, we need to add a permissions block to the workflow. This block should specify the least privileges required for the workflow to function correctly. Based on the actions performed in the workflow, the minimal permissions required are contents: read. This ensures the workflow can read repository contents without granting unnecessary write permissions.
The permissions block should be added at the root level of the workflow file to apply to all jobs. Alternatively, it can be added specifically to the test job if other jobs in the workflow require different permissions.
Suggested changeset
1
.github/workflows/playwright.yml
| @@ -12,2 +12,5 @@ | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: |
Copilot is powered by AI and may make mistakes. Always verify output.
haiphucnguyen
force-pushed
the
feature/playwright-testing
branch
from
af0373c to
4cea25a
Compare
haiphucnguyen
temporarily deployed
to
github-pages
GitHub Actions
Inactive
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Changes Made
Additional Notes