CI #140

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	types: [opened, synchronize, reopened]
	schedule:
	- cron: 0 0 * * 0
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	test-node:
	strategy:
	matrix:
	node-version: [18, 20, 22]
	name: test (node-${{ matrix.node-version }})
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: pnpm/action-setup@v3
	- uses: actions/setup-node@v4
	with:
	node-version: ${{ matrix.node-version }}
	cache: pnpm
	- run: pnpm build && pnpm test:node

	test-all:
	name: test (deno, bun)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: pnpm/action-setup@v3
	- uses: actions/setup-node@v4
	with:
	node-version: 20
	cache: pnpm
	- uses: denoland/setup-deno@v1
	- uses: oven-sh/setup-bun@v1
	with:
	bun-version: latest
	- run: pnpm lint && [ -z "$(git status --porcelain)" ]
	- run: pnpm test:deno && pnpm test:bun

	devskim:
	name: devskim
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write
	steps:
	- uses: actions/checkout@v4
	- uses: microsoft/devskim-action@v1
	with:
	directory-to-scan: src
	- run: \|
	jq '(.. \| select(type == "object" and .artifactLocation and .artifactLocation.uri) \| .artifactLocation.uri) \|= "src/" + .' devskim-results.sarif > devskim-results.sarif.tmp
	mv devskim-results.sarif.tmp devskim-results.sarif
	- uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: devskim-results.sarif
	category: devskim

Provide feedback