VIA-598 AJ/DB WIP add contract tests to scheduled assurance

Author: ankur-jain-nhs

.github/actions/deploy/action.yml

@@ -29,7 +29,7 @@ runs:
     #  - why? given we reuse preprod for R1.0 and R2.0, when IAM permission change across releases, then deployment fails
     #  - constraint? make sure R2.0 IAM permissions are a superset of R1.0 IAM permissions
     #  - what? deploy IAM from R2.0 as it is a superset and then R1.0 deployments will succeed as well
-    - name: "Checkout code"
+    - name: "Checkout main branch"
       uses: actions/checkout@v5
       with:
         ref: 'main'
@@ -80,7 +80,7 @@ runs:
     # Download the required artefacts from AWS
     #################################################
 
-    - name: "Checkout code"
+    - name: "Checkout target code"
       uses: actions/checkout@v5
       with:
         ref: ${{ inputs.tag_or_sha_to_deploy }}

.github/actions/run-contract-tests/action.yml

@@ -0,0 +1,40 @@
+name: run-contract-tests
+description: "Run contract tests"
+
+inputs:
+  target_ref:
+    description: "Target ref to run tests on"
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    #################################################
+    # Run contract tests
+    #################################################
+
+    - name: "Checkout target code"
+      uses: actions/checkout@v5
+      with:
+        ref: ${{ inputs.target_ref }}
+        path: "code-for-contract-tests"
+
+    - name: "Cache node modules"
+      uses: actions/cache@v4
+      env:
+        cache-name: cache-node-modules
+      with:
+        path: ~/.npm
+        key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('./code-for-contract-tests/**/package-lock.json') }}
+
+    - name: "Install dependencies"
+      shell: bash
+      working-directory: "./code-for-contract-tests"
+      run: |
+        npm ci --ignore-scripts
+
+    - name: "Run contract tests ${{inputs.environment}}"
+      shell: bash
+      working-directory: "./code-for-contract-tests"
+      run: |
+        npm run contract

.github/workflows/cicd-9-scheduled-wip.yaml

@@ -2,7 +2,7 @@ name: "CI/CD scheduled assurances WIP"
 
 on:
   schedule:
-    - cron: '22 15 * * MON-FRI'  # Runs at 09:30 UTC every weekday
+    - cron: '30 9 * * MON-FRI'  # Runs at 09:30 UTC every weekday
   workflow_dispatch:
     inputs:
       release:
@@ -53,6 +53,12 @@ jobs:
         secret_aws_iam_role: ${{ secrets.IAM_ROLE }}
         secret_aws_slack_channel_id: ${{ secrets.ALARMS_SLACK_CHANNEL_ID }}
 
+    - name: "Run contract tests (sandpit+mocked)"
+      timeout-minutes: 10
+      uses: ./.github/actions/run-contract-tests
+      with:
+        target_ref: ${{ steps.get-latest-tag-name.outputs.value }}
+
   deploy-and-test-main:
     name: "Main Branch Assurance"
     runs-on: "ubuntu-latest"