Audit hardening: rate-limiter bound, logout cookie path, Cloudflare Tunnel docs #84
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| # Validate PRs (incl. Dependabot) before merge — but NOT arbitrary branch | |
| # pushes, so only main and PRs targeting it run CI. | |
| pull_request: | |
| branches: [main] | |
| jobs: | |
| server: | |
| name: Server tests | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: server | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version: "22" | |
| cache: npm | |
| cache-dependency-path: server/package-lock.json | |
| - run: npm ci | |
| - run: npm test | |
| client: | |
| name: Client build | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: client | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version: "22" | |
| cache: npm | |
| cache-dependency-path: client/package-lock.json | |
| - run: npm ci | |
| - run: npm run build |