fix: relax CSP to allow SvelteKit bootstrap and Cloudflare edge scripts #56
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Action self-test | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| permissions: | |
| id-token: write | |
| checks: write | |
| jobs: | |
| test: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| # Run the Action runner's own unit tests. | |
| # vitest --coverage emits coverage/coverage-summary.json (Istanbul json-summary format), | |
| # which is exactly what collect.sh reads for the JS coverage path. | |
| # The Action dogfoods itself: real test coverage replaces a hardcoded artifact. | |
| - name: Test Action runner | |
| working-directory: .github/actions/report | |
| run: npm ci && npm test | |
| # Run the collect.sh parser fixture tests. | |
| - name: Test collect.sh parsers | |
| run: bash test/collect-parsers.sh | |
| - uses: ./.github/actions/report | |
| with: | |
| worker-url: https://coverage-tracker.zerostash.org | |
| min-coverage: '20' | |
| max-coverage-drop: '5' | |
| coverage-report-js: .github/actions/report/coverage/coverage-summary.json |