chore: cdk DevDnsStack DevStack compute/dns constructs. Full deployme… #80

	name: ci

	env:
	NODE_VERSION: 20

	permissions:
	id-token: write
	contents: read

	on:
	push:
	branches:
	- main
	paths-ignore:
	- "*/.md"
	pull_request:
	paths-ignore:
	- "*/.md"

	concurrency: ${{ github.workflow }}-${{ github.ref }}

	jobs:
	audit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	node-version: ${{ env.NODE_VERSION }}
	- run: npm ci
	- run: npm audit

	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-node@v4
	with:
	node-version: ${{ env.NODE_VERSION }}
	- run: npm ci
	- run: npx turbo run lint --filter=...[HEAD^1]

	test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-node@v4
	with:
	node-version: ${{ env.NODE_VERSION }}
	- run: npm ci
	- run: npx turbo run test --filter=...[HEAD^1]

	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-node@v4
	with:
	node-version: ${{ env.NODE_VERSION }}
	- run: npm ci
	- run: npx turbo run build --filter=...[HEAD^1]

	sonarcloud:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: SonarCloud Scan
	uses: sonarsource/sonarcloud-github-action@master
	env:
	NODE_VERSION: ${{ env.NODE_VERSION }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

	deploy-cdk-tools:
	if: ${{ github.ref == 'refs/heads/main' }}
	needs: [audit, lint, test, build, sonarcloud]
	uses: ./.github/workflows/deploy-cdk-tools.yml

Provide feedback