+ workflows/{fe,c#}.yml

+ codechecks.yml
@ .github

.github/actions/c#/action.yml

@@ -0,0 +1,19 @@
+name: c#/init
+description: c#/init
+runs:
+  using: composite
+  steps:
+    - uses: actions/checkout@v4
+      with:
+        submodules: true
+    - uses: actions/setup-dotnet@v4
+      with:
+        dotnet-version: 7
+        cache: true
+        cache-dependency-path: ${{ github.workspace }}/c#/*/packages.lock.json
+    - run: dotnet new globaljson --sdk-version 7.0.405
+      working-directory: c#
+      shell: bash
+    - run: dotnet restore
+      working-directory: c#
+      shell: bash

.github/actions/fe/action.yml

@@ -0,0 +1,15 @@
+name: fe/init
+description: fe/init
+runs:
+  using: composite
+  steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
+      with:
+        node-version: lts/*
+        cache: yarn
+        cache-dependency-path: ${{ github.workspace }}/fe/yarn.lock
+    - name: install
+      run: yarn install --immutable
+      working-directory: fe
+      shell: bash

.github/codechecks.yml

@@ -0,0 +1,8 @@
+settings:
+  # https://github.com/codechecks/monorepo/blob/4ccc8bbaab1586c0ef265f234f0a275fd40b38f8/packages/client/src/speculativeBranchSelection.ts#L73
+  branches: ['v2']
+checks:
+  - name: typecov
+    options:
+      strict: true
+      atLeast: 95

.github/workflows/c#.yml

@@ -0,0 +1,18 @@
+name: c#
+on:
+  push:
+    #paths: [c#/**]
+defaults:
+  run:
+    working-directory: c#
+jobs:
+  init:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        project: [crawler, imagePipeline, shared, tbClient]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: .github/actions/c#/action.yml
+      - name: build
+        run: dotnet build -c Debug ${{ matrix.project }}

.github/workflows/fe.yml

@@ -0,0 +1,30 @@
+name: fe
+on:
+  push:
+    #paths: [fe/**]
+defaults:
+  run:
+    working-directory: fe
+jobs:
+  tsc:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: .github/actions/fe/action.yml
+      - run: yarn run vue-tsc
+  eslint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: .github/actions/fe/action.yml
+      - run: yarn run eslint src
+  codechecks:
+    runs-on: ubuntu-latest
+    steps: # contains CVE that triggers Dependabot
+      - uses: actions/checkout@v4
+      - uses: .github/actions/fe/action.yml
+      - run: |
+          yarn add -D typecov @codechecks/client
+          yarn run codechecks ../.github/codechecks.yml
+        env:
+          CC_SECRET: ${{ secrets.CC_SECRET }}