test.yml

name: test

on:
  push:
    branches:
      - main
      - dev
  pull_request:
  workflow_dispatch:

permissions:
  contents: read
  id-token: write

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  integration:
    name: Integration
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version-file: .node-version
          cache: 'npm'

      - run: npm ci
      - run: npm test

  end-to-end:
    name: End-to-End
    runs-on: ubuntu-latest
    # do not run from forks, as forks don’t have access to repository secrets
    if: github.event.pull_request.head.repo.owner.login == github.event.pull_request.base.repo.owner.login
    steps:
      - uses: actions/checkout@v4
      
      - name: AWS Login
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ vars.AWS_REGION }}
          role-to-assume: ${{ secrets.ROLE_TO_ASSUME }}
          role-session-name: test-create-github-app-token-aws

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: "npm"
      - run: npm ci
      - run: npm run build
      - uses: ./ # Uses the action in the root directory
        id: test
        with:
          app-id: ${{ secrets.APP_ID }}
          kms-key-id: ${{ secrets.KMS_KEY_ID }}
      - uses: octokit/request-action@v2.x
        id: get-repository
        env:
          GITHUB_TOKEN: ${{ steps.test.outputs.token }}
        with:
          route: GET /installation/repositories
      - run: echo '${{ steps.get-repository.outputs.data }}'