chore(ci) ensure CI fails if there are too much errors

Author: Babali42

.github/actions/test/action.yml

@@ -25,17 +25,10 @@ runs:
       working-directory: ./frontend
 
     - name: Run ESLint
-      run: npx eslint . --format @microsoft/eslint-formatter-sarif --output-file eslint-results.sarif
+      run: npm run lint
       shell: bash
       working-directory: ./frontend
 
-    - name: Upload ESLint results to GitHub
-      if: always()
-      uses: github/codeql-action/upload-sarif@v4
-      with:
-        sarif_file: frontend/eslint-results.sarif
-        wait-for-processing: true
-
     - name: Run angular/karma tests
       run: npm run test-ci
       shell: bash

.github/workflows/angular-deploy-github-pages.yml

@@ -2,7 +2,6 @@ name: Deploy Angular App to GitHub Pages
 
 permissions:
   contents: write
-  security-events: write
 
 on:
   push:
@@ -55,4 +54,32 @@ jobs:
       - uses: peaceiris/actions-gh-pages@v4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
-          publish_dir: ./
+          publish_dir: ./
+
+  sarif:
+    if: always()
+    needs: deploy
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    permissions:
+      contents: read
+      security-events: write
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: '26'
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - run: npm ci
+        working-directory: frontend/
+
+      - run: npx eslint . --max-warnings=10 -f @microsoft/eslint-formatter-sarif -o eslint-results.sarif || true
+        working-directory: frontend/
+
+      - uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: frontend/eslint-results.sarif
+          wait-for-processing: true

.github/workflows/angular-tests.yml

@@ -7,7 +7,6 @@ on:
 
 permissions:
   contents: read
-  security-events: write
 
 jobs:
   test:

frontend/package.json

@@ -9,7 +9,8 @@
     "test": "ng test --code-coverage --watch",
     "test-ci": "ng test --code-coverage --no-watch --browsers=ChromeHeadless",
     "test-vitest": "vitest",
-    "test-vitest-coverage": "vitest run --coverage"
+    "test-vitest-coverage": "vitest run --coverage",
+    "lint": "eslint . --max-warnings=10"
   },
   "private": true,
   "dependencies": {