Pangea MCP Server

name: CI on: push: branches: - main pull_request: types: - opened - synchronize - reopened - ready_for_review merge_group: workflow_dispatch: permissions: contents: read concurrency: group: ${{ github.workflow }}-${{ github.event.number || github.ref }} cancel-in-progress: true jobs: build: runs-on: ubuntu-24.04 steps: - name: Harden runner uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 with: egress-policy: audit - name: Checkout code uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 - run: corepack enable - name: Setup Node.js uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: node-version: 24.11.1 cache: pnpm - name: Install dependencies run: pnpm install - name: Build run: pnpm build - name: Typecheck run: pnpm typecheck lint: runs-on: ubuntu-24.04 steps: - name: Harden runner uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 with: egress-policy: audit - name: Checkout code uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 - run: corepack enable - name: Setup Node.js uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: node-version: 24.11.1 cache: pnpm - name: Install dependencies run: pnpm install - name: Lint run: pnpm lint docker: runs-on: ubuntu-24.04 steps: - name: Harden runner uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 with: egress-policy: audit - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0 - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Build Docker image uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: file: ./Dockerfile context: . cache-from: type=gha cache-to: type=gha,mode=max push: false release: needs: - build - lint - docker if: github.repository == 'pangeacyber/pangea-mcp-server' && github.event_name != 'pull_request' runs-on: ubuntu-24.04 permissions: contents: write id-token: write issues: write packages: write pull-requests: write steps: - name: Harden runner uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 with: egress-policy: audit - name: Checkout code uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 with: fetch-depth: 0 filter: blob:none show-progress: false - run: corepack enable - name: Setup Node.js uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 with: node-version: 24.11.1 cache: pnpm - name: Install dependencies run: pnpm install - name: Build run: pnpm build - name: semantic-release run: npx semantic-release env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} LOG_LEVEL: debug