ci: harden release image provenance (#165) #6

	name: Node CI

	on:
	pull_request:
	push:
	branches:
	- main
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: node-ci-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	test:
	name: Node CI
	runs-on: ubuntu-latest
	steps:
	- name: Check out repository
	uses: actions/checkout@v7
	with:
	persist-credentials: false

	- name: Set up Go
	uses: actions/setup-go@v7
	with:
	go-version-file: go.mod
	cache: true
	cache-dependency-path: go.sum

	- name: Set up Node.js
	uses: actions/setup-node@v7
	with:
	node-version: 24
	cache: npm
	cache-dependency-path: package-lock.json

	- name: Install dependencies
	run: npm ci

	- name: Run lint
	run: npm run lint

	- name: Run tests
	run: npm test

Navigation Menu