pretest.yml

name: 'Tests: pretest/posttest'

on: workflow_call

permissions:  # added using https://github.com/step-security/secure-repo
  contents: read

jobs:
  pretest:
    runs-on: ubuntu-latest

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@v2
        with:
          disable-sudo: true
          egress-policy: audit
          allowed-endpoints: >
            github.com:443
            raw.githubusercontent.com:443
            nodejs.org:443
            iojs.org:443
            registry.npmjs.org:443

      - uses: actions/checkout@v4
        with:
          show-progress: false
      - uses: ljharb/actions/node/install@main
        name: 'nvm install lts/* && npm install'
        with:
          node-version: 'lts/*'
      - run: npm run pretest

  posttest:
    runs-on: ubuntu-latest

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@v2
        with:
          disable-sudo: true
          egress-policy: audit
          allowed-endpoints: >
            github.com:443
            raw.githubusercontent.com:443
            nodejs.org:443
            iojs.org:443
            registry.npmjs.org:443

      - uses: actions/checkout@v4
        with:
          show-progress: false
      - uses: ljharb/actions/node/install@main
        name: 'nvm install lts/* && npm install'
        with:
          node-version: 'lts/*'
      - run: npm run posttest

  engines:
    runs-on: ubuntu-latest
    steps:
      - uses: ljharb/actions/node/engines@main

  pack:
    runs-on: ubuntu-latest
    steps:
      - uses: ljharb/actions/node/pack@main