feat: Add CI/CD workflow for React Todo App with build and test steps

Author: chrisreddington

.github/workflows/attestations.yml .github/workflows/attest-and-deploy.yml.github/workflows/attestations.yml renamed to .github/workflows/attest-and-deploy.yml

@@ -17,10 +17,16 @@ jobs:
       # Checkout the repository
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+    
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: '22'
+          cache: 'npm'
 
       # Install dependencies
       - name: Install dependencies
-        run: npm install
+        run: npm ci
 
       # Generate SBOM from the dependencies (scanning the workspace directory)
       - name: Generate SBOM

.github/workflows/ci-cd.yml

@@ -0,0 +1,43 @@
+name: React Todo App CI/CD
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+# Explicitly define permissions
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
+jobs:
+  build-and-test:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+    
+    - name: Setup Node.js
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+      with:
+        node-version: '22'
+        cache: 'npm'
+    
+    - name: Install dependencies
+      run: npm ci
+    
+    - name: Build application
+      run: npm run build
+    
+    - name: Run tests
+      run: npm test
+
+    # TODO: Add linting steps
+    # - name: Run ESLint
+    #   run: npm run lint
+    #
+    # - name: Run accessibility checks
+    #   run: npm run lint:a11y