Fix/ci download artifact #56

	name: Code Quality & Security

	on:
	push:
	branches:
	- main
	- develop
	pull_request:
	branches:
	- main
	- develop
	schedule:
	# Run security checks daily at 2 AM UTC
	- cron: '0 2 * * *'

	permissions:
	contents: read
	security-events: write
	pull-requests: write

	jobs:
	code-quality:
	name: Code Quality Analysis
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 22.x
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Check for unused dependencies
	run: npm list --depth=0
	continue-on-error: true

	dependency-check:
	name: Dependency Security Scan
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Run npm audit
	run: npm audit --production
	continue-on-error: true

	- name: Run npm audit for dev dependencies
	run: npm audit
	continue-on-error: true

	type-check:
	name: TypeScript Type Checking
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 22.x
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Generate Prisma client
	run: npm run prisma:generate

	- name: Check TypeScript types
	run: npx tsc --noEmit

Navigation Menu