workflow.yml

name: Build task
on:
  push:
    branches:
      - main
  pull_request:

permissions: {}

jobs:
  Build:
    permissions:
      contents: read  # for actions/checkout to fetch code
    runs-on: macos-latest
    steps:
    - name: Harden the runner (Audit all outbound calls)
      uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
      with:
        egress-policy: audit

    - name: Checkout
      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

    - name: Set Node.JS
      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
      with:
        node-version: 24.x

    - name: npm install
      run: npm install

    - name: Build
      run: npm run build

    - name: Run tests
      run: npm run test

    - name: Run Prettier
      run: npm run format-check

    - name: Lint
      run: npm run lint