name: Frontend verify

on:
  push:
    branches:
      - '**'
  pull_request:

jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: https://github.com/actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Record checked revision
        run: git rev-parse HEAD
      - uses: https://github.com/actions/setup-node@v4
        with:
          node-version-file: .nvmrc
      - run: npm ci
        env:
          HUSKY: '0'
      - name: Run all frontend gates
        run: npm run verify
        env:
          # OXC raw transfer allocates a ~6 GiB buffer; use the standard parser in CI.
          KNIP_DISABLE_RAW_TRANSFER: '1'
      - name: Analyze develop with SonarQube
        if: gitea.event_name == 'push' && gitea.ref == 'refs/heads/develop'
        # v2.3.0: Docker-based scanner for the SonarQube 9.9 server.
        uses: https://github.com/SonarSource/sonarqube-scan-action@aecaf43ae57e412bd97d70ef9ce6076e672fe0a9
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        with:
          args: -Dsonar.qualitygate.wait=true