Voeg Gitea workflows toe

.gitea/workflows/ci.yaml

@@ -1,54 +1,41 @@
 name: CI
-
 on:
-  push:
-    branches:
-      - main
-      - "feat/**"
-      - "fix/**"
   pull_request:
     branches:
       - main
 
 jobs:
   check:
-    runs-on: ubuntu-latest
+    runs-on: shell
-    
-    env:
-      SKIP_ENV_VALIDATION: 1
-      ARGON2_MEMORY_SIZE: 1024
-      ARGON2_ITERATIONS: 1
-      BCRYPT_ROUNDS: 4
-      DATABASE_URL: "mysql://ci:[email protected]:3306/ci"
-
     steps:
-      - name: Checkout code
+      - name: Typecheck, lint, and test
-        uses: actions/checkout@v4
+        run: |
+          set -e
+          WORK="$(mktemp -d /var/tmp/epicnext-ci.XXXXXX)"
+          cleanup() { rm -rf "${WORK}"; }
+          trap cleanup EXIT
 
-      - name: Setup Node.js
+          echo "--- CI checks (${WORK}) ---"
-        uses: actions/setup-node@v4
+          git clone --depth 50 \
-        with:
+            /docker/gitea/gitea/git/repositories/remco/epicnext-cms.git \
-          node-version: 22
+            "${WORK}"
+          cd "${WORK}"
 
-      - name: Setup PNPM
+          REF="${{ gitea.sha }}"
-        uses: pnpm/action-setup@v4
+          if [ -z "${REF}" ]; then
-        with:
+            echo "ERROR: missing gitea.sha" >&2
-          version: 10
+            exit 1
+          fi
+          git fetch --depth 50 origin "${REF}"
+          git checkout -f "${REF}"
 
-      - name: Install dependencies
+          export SKIP_ENV_VALIDATION=1
-        run: pnpm install --frozen-lockfile
+          export ARGON2_MEMORY_SIZE=1024
-
+          export ARGON2_ITERATIONS=1
-      - name: Generate Prisma Client
+          export BCRYPT_ROUNDS=4
-        run: pnpm prisma:generate
+          pnpm install --frozen-lockfile
-
+          pnpm prisma:generate
-      - name: Security Audit
+          pnpm biome:lint
-        run: pnpm audit --audit-level=high || echo "WARNING: pnpm audit found vulnerabilities"
+          pnpm typecheck
-
+          pnpm test
-      - name: Biome Linter
+          echo "--- CI checks passed ---"
-        run: pnpm biome:lint
-
-      - name: TypeScript Typecheck
-        run: pnpm typecheck
-
-      - name: Run Tests
-        run: pnpm test