mirror of
https://github.com/hanzoai/openid-client.git
synced 2026-09-24 17:01:10 +00:00
zeekayandHanzo Dev
96bac43696
github.com has no runner for hanzo-build-linux-amd64, so a caller under .github/workflows is a gate that can never be scheduled. This is the ~7-line caller on the plane that can (git.hanzo.ai git-runner fleet), pinned @v1. Co-authored-by: Hanzo Dev <[email protected]>
20 lines
959 B
YAML
20 lines
959 B
YAML
# Canonical CI/CD config for hanzoai/openid-client — read by the hanzoai/ci
|
|
# reusable workflow (.hanzo/workflows/cicd.yml) and by platform.hanzo.ai.
|
|
#
|
|
# LIBRARY: an OAuth 2 / OpenID Connect client. No image, no deploy — it ships
|
|
# from a tag.
|
|
#
|
|
# The gate is the ava suite under test/, which is the right one for a protocol
|
|
# client: every case stands up an undici MockAgent with `disableNetConnect()`
|
|
# and asserts on the exact bytes of the request and the handling of the
|
|
# response — DPoP proofs, PAR, DCR, decryption, issuer checks. It is hermetic
|
|
# (no OP is contacted) and it fails on a semantic change a type-check cannot
|
|
# see, which is the only kind of bug that matters in an auth client.
|
|
#
|
|
# `npm clean-install`, not `npm install`: the lockfile is what the published
|
|
# package is built against, and a gate that silently floats its own
|
|
# dependencies is testing a tree nobody ships.
|
|
test:
|
|
- name: test
|
|
run: npm clean-install && npm test
|