main.yml

name: Test main

on:
  push:
    branches: ["main"]
  workflow_dispatch:

permissions:
  contents: read
  security-events: write

jobs:
  test:
    strategy:
      matrix:
        os:
          - windows-latest
          - ubuntu-latest
          - macos-latest
    runs-on: ${{ matrix.os }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Test
        uses: ./.github/actions/test
        with:
          codecov_token: ${{ secrets.CODECOV_TOKEN }}
      - name: Run Snyk to check for vulnerabilities
        uses: snyk/actions/dotnet@master
        # synk/actions uses Container action that is only supported on Linux.
        if: runner.os == 'Linux'
        continue-on-error: true # To make sure that SARIF upload gets called
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          command: test
          args: --all-projects --sarif-file-output=snyk.sarif
      - name: Upload result to GitHub Code Scanning
        if: runner.os == 'Linux'
        uses: github/codeql-action/upload-sarif@v2
        with:
          sarif_file: snyk.sarif