💚 add GH workflow

ctcpip · Feb 2, 2024 · da755d9 · da755d9
1 parent 691f47d
commit da755d9
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 2 deletions.
diff --git a/.github/workflows/security-test.yml b/.github/workflows/security-test.yml
@@ -0,0 +1,22 @@
+name: 'jQuery Security Tests'
+
+on: [pull_request, push, workflow_dispatch]
+
+permissions:
+  contents: read
+
+jobs:
+  test-security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: browser-actions/setup-chrome@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 'lts/*'
+      - run: npm ci
+        working-directory: security/server
+      - run: npm ci
+        working-directory: security/test
+      - run: npm test
+        working-directory: security/test
diff --git a/security/test/index.mjs b/security/test/index.mjs
@@ -18,12 +18,15 @@ const timeout = 5 * 1000;
 let cmd;
 
 if(platform === 'darwin'){
-  cmd = `"/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome" --headless=old --virtual-time-budget=${timeout} --run-all-compositor-stages-before-draw --dump-dom `;
+  cmd = `"/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome" `;
 }
 else {
 	// presume *nix
+	cmd = 'chrome ';
 }
 
+cmd += `--headless=old --virtual-time-budget=${timeout} --run-all-compositor-stages-before-draw --dump-dom `;
+
 for (const v of jQueryVersions) {
 	try {
 		test(v);
@@ -46,7 +49,7 @@ function test(version, patched) {
 
 	console.log(`
 --------------------------------------------------------------------------------
-	validating jQuery v${effectiveVersion}
+  validating jQuery v${effectiveVersion}
 --------------------------------------------------------------------------------
 `)