feat(continuous-integration): supports build artifact

Signed-off-by: Emilien Escalle <[email protected]>

Author: neilime

.github/workflows/continuous-integration.yml

@@ -46,6 +46,8 @@ jobs:
   code-ql:
     name: 🛡️ CodeQL Analysis
     if: inputs.checks == true && inputs.code-ql != ''
+    permissions:
+      security-events: write
     runs-on: "ubuntu-latest"
     steps:
       - uses: hoverkraft-tech/ci-github-common/actions/[email protected]
@@ -61,6 +63,9 @@ jobs:
     permissions:
       contents: read
       id-token: write
+    outputs:
+      build-commands: ${{ steps.build-variables.outputs.commands }}
+      build-artifact: ${{ steps.build-variables.outputs.artifact }}
     steps:
       # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
       # jscpd:ignore-start
@@ -78,6 +83,54 @@ jobs:
       - id: setup-node
         uses: ./self-workflow/actions/setup-node
 
+      - id: build-variables
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const buildInput = `${{ inputs.build }}`.trim();
+
+            let commands = [];
+
+            // Build input can be json or string
+            try {
+              const build = JSON.parse(buildInput);
+              if (Array.isArray(build)) {
+                commands = build;
+              } else {
+                commands = build.commands ?? ["build"];
+
+                if (build.artifact) {
+                  if(typeof build.artifact === 'string') {
+                    build.artifact = build.artifact.trim().split('\n');
+                  }
+                  const sanitizedArtifacts = build.artifact
+                    .map(artifact => artifact.trim())
+                    .filter(Boolean)
+                    .map(artifact => {
+                      if(!artifact.includes('*')) {
+                        return artifact;
+                      }
+
+                      // FIXME: Workaround to preserve full path to artifact
+                      // Add a wildcard to the first folder of the path
+                      const workspace = `${{ github.workspace }}`.replace(/\/([^/]+)/, '/*$1');
+                      return `${workspace}/${artifact}`;
+                    });
+
+                  core.setOutput('artifact', sanitizedArtifacts.join('\n'));
+                }
+              }
+            } catch (e) {
+              commands = buildInput.split('\n');
+            }
+
+            const sanitizedCommands = commands.map(command => command.trim()).filter(Boolean);
+            if(!sanitizedCommands.length) {
+              core.setFailed('No build commands found');
+            }
+
+            core.setOutput('commands', sanitizedCommands.join('\n'));
+
   lint:
     name: 👕 Lint
     if: inputs.checks == true && inputs.lint != false
@@ -186,7 +239,7 @@ jobs:
             ${{ runner.os }}-cache-storybook-
 
       - run: |
-          BUILD_COMMANDS="${{ inputs.build }}"
+          BUILD_COMMANDS="${{ needs.setup.outputs.build-commands }}"
 
           echo "$BUILD_COMMANDS" | while IFS= read -r COMMAND ; do
               # Trim whitespace
@@ -201,11 +254,19 @@ jobs:
               yarn "$COMMAND"
           done
 
+      - if: needs.setup.outputs.build-artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: build
+          path: ${{ needs.setup.outputs.build-artifact }}
+
   test:
     name: 🧪 Test
     if: inputs.checks == true && inputs.test == true
     runs-on: "ubuntu-latest"
-    needs: setup
+    needs:
+      - setup
+      - build
     # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
     permissions:
       contents: read
@@ -214,6 +275,12 @@ jobs:
       # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
       - uses: hoverkraft-tech/ci-github-common/actions/[email protected]
 
+      - if: needs.setup.outputs.build-artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: build
+          path: '/'
+
       - id: oidc
         uses: ChristopherHX/oidc@v3
       - uses: actions/checkout@v4 # checks out called workflow