reusable.test.yml

name: Test

on:
  workflow_call:
    secrets:
      CODECOV_TOKEN:
        required: true

permissions:
  contents: read

jobs:
  # Test
  test:
    name: Test
    runs-on: ubuntu-latest
    steps:
      # Harden Runner
      - name: Harden Runner # Audit all outbound calls
        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
        with:
          egress-policy: audit

      # Checkout
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          fetch-depth: 2 # At least fetch the last two commits for comparison
          persist-credentials: false

      # Setup Node
      - name: Setup Node
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version: lts/*

      # Clean Install
      - name: Clean Install
        run: npm ci

      # Run Test and Generate Coverage
      - name: Run Test and Generate Coverage
        run: npm test

      # Upload Coverage Reports to Codecov
      - name: Upload Coverage Reports to Codecov
        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}