Repository navigation

chore(deps): bump aquasecurity/trivy-action from a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 to ed142fd0673e97e23eac54620cfb913e5ce36c25 #2760

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	frontend:
	name: "Frontend"
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: frontend
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
	with:
	# The pinned major lives in one place; a hardcoded literal here would
	# silently drift from the file and the Dockerfile's node stage.
	node-version-file: frontend/.node-version
	# Yarn is vendored (.yarn/releases/*.cjs) and invoked via node — no
	# corepack (node 25+ dropped the bundle).
	- name: Frontend checks
	run: \|
	yarn() { node .yarn/releases/yarn-*.cjs "$@"; }
	yarn install --immutable
	yarn playwright install chromium
	yarn format
	yarn lint
	yarn typecheck
	yarn test
	yarn build

	backend:
	name: "Backend"
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: backend
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	- uses: dtolnay/rust-toolchain@stable
	with:
	components: clippy, rustfmt
	- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
	with:
	workspaces: backend
	- run: cargo fmt --all -- --check
	- run: cargo clippy --workspace --all-targets -- -D warnings
	- run: cargo test --workspace
	- run: cargo build --workspace --release