ci.yml

name: build-and-test

on:
  push:
    branches: ["main"]
  pull_request:

permissions:
  contents: read

jobs:
  windows:
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-dotnet@v4
        with:
          dotnet-version: "10.0.x"
          cache: true
          cache-dependency-path: "**/packages.lock.json"
      - name: Restore locked dependencies
        run: dotnet restore DarksFIDO2.slnx --locked-mode
      - name: Build
        run: dotnet build DarksFIDO2.slnx -c Release --no-restore
      - name: Test
        run: dotnet run --project tests/DarksFIDO2.Tests/DarksFIDO2.Tests.csproj -c Release --no-build
      - name: Browser WebAuthn ceremony
        run: dotnet run --project tests/DarksFIDO2.BrowserTests/DarksFIDO2.BrowserTests.csproj -c Release --no-build
      - name: Audit NuGet dependencies
        run: dotnet list DarksFIDO2.slnx package --vulnerable --include-transitive