feat: Add GC authentication to Lighthouse GitHub Action

Author: flozia

.github/workflows/lighthouse_cron.yml

@@ -16,6 +16,9 @@ jobs:
   lhci:
     name: Lighthouse Report  - ${{ inputs.environment != null && inputs.environment || 'prod' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - name: Use Node.js 20.9.x
@@ -32,5 +35,12 @@ jobs:
         run: |
           npm ci
           npm run build-cronjobs
+      - name: Authenticate to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          workload_identity_provider: ${{ secrets.GC_LIGHTHOUSE_WORKLOAD_IDENTITY_PROVIDER }}
+          service_account: ${{ secrets.GC_LIGHTHOUSE_SERVICE_ACCOUNT }}
+          env:
+            BQ_LIGHTHOUSE_DATASET: ${{ secrets.BQ_LIGHTHOUSE_DATASET }}
       - name: Report results
         run: npm run cron:report-lighthouse-results

package-lock.json

@@ -115,6 +115,7 @@
   },
   "devDependencies": {
     "@faker-js/faker": "^9.3.0",
+    "@google-cloud/bigquery": "^7.9.1",
     "@playwright/test": "^1.49.1",
     "@storybook/addon-a11y": "^8.4.7",
     "@storybook/addon-actions": "^8.4.7",

package.json

@@ -3,6 +3,7 @@
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 import { readFile } from "node:fs/promises";
+import { BigQuery } from "@google-cloud/bigquery";
 import { logger } from "../../app/functions/server/logging";
 
 const AUDITS_TO_INCLUDE = [
@@ -29,6 +30,17 @@ type LighthouseResult = {
   };
 };
 
+async function getLighthouseResults() {
+  try {
+    const bigQueryClient = new BigQuery();
+    const query = `SELECT * FROM ${process.env.BQ_LIGHTHOUSE_DATASET}`;
+    const [rows] = await bigQueryClient.query({ query });
+    return rows;
+  } catch (error) {
+    console.error("Error querying Lighthouse results", error);
+  }
+}
+
 async function run() {
   // The Lighthouse report that will be created by running LHCI.
   const lighthouseResults: LighthouseResult[] =
@@ -72,6 +84,9 @@ async function run() {
   });
   console.table(transformedData);
   logger.info("lighthouse_report", lighthouseReport);
+
+  const results = getLighthouseResults();
+  console.info("BigQuery dataset", results);
 }
 
 try {