Add password to artifact

.changeset/wicked-llamas-do.md

@@ -0,0 +1,5 @@
+---
+"saleor-dashboard": patch
+---
+
+Tests reports from artifacts will be protected by password

.github/actions/merge-pw-reports/action.yml

@@ -1,6 +1,11 @@
 name: Merge playwright reports
 description: Merge reports from all shards
 
+inputs:
+  PASSWORD_FOR_DECODING_ARTIFACT: 
+    description: "Password for decoding artifact"
+    required: true
+
 runs:
   using: "composite"
   steps:
@@ -21,11 +26,15 @@ runs:
 
     - name: Merge into HTML Report
       shell: bash
-      run: npx playwright merge-reports --reporter html ./all-blob-reports
+      env:
+        PASSWORD_FOR_DECODING_ARTIFACT: ${{ inputs.PASSWORD_FOR_DECODING_ARTIFACT }}
+      run: |
+        npx playwright merge-reports --reporter html ./all-blob-reports
+        zip -P $PASSWORD_FOR_DECODING_ARTIFACT secure-report.zip -r ./playwright-report
 
     - name: Upload HTML report
       uses: actions/upload-artifact@v4
       with:
         name: html-report--attempt-${{ github.run_attempt }}
-        path: playwright-report
+        path: secure-report.zip
         retention-days: 14

.github/workflows/pr-automation.yml

@@ -234,6 +234,8 @@ jobs:
 
       - name: Merge playwright reports
         uses: ./.github/actions/merge-pw-reports
+        with:
+           PASSWORD_FOR_DECODING_ARTIFACT: ${{ secrets.TESTS_RESULT_PASSWORD }}
 
       - name: complete testmo report
         uses: ./.github/actions/testmo/testmo-finish
@@ -242,6 +244,7 @@ jobs:
           testmoToken: ${{ secrets.TESTMO_TOKEN }}
           testmoRunId: ${{ needs.deploy-dashboard.outputs.TESTMO_RUN_ID }}
 
+
       - name: Create flaky report
         uses: ./.github/actions/flaky-tests-report
         with:

.github/workflows/run-test-manual.yml

@@ -142,6 +142,8 @@ jobs:
 
       - name: Merge playwright reports
         uses: ./.github/actions/merge-pw-reports
+        with:
+           PASSWORD_FOR_DECODING_ARTIFACT: ${{ secrets.TESTS_RESULT_PASSWORD }}
 
       - name: complete testmo report
         uses: ./.github/actions/testmo/testmo-finish

.github/workflows/run-tests-on-release.yml

@@ -1,6 +1,5 @@
 name: Run automation tests on release
 on:
-
   workflow_call:
     inputs:
       VERSION:
@@ -41,7 +40,7 @@ on:
       RUN_URL:
         value: "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
         description: Url to job run
-      PR_COMMENT: 
+      PR_COMMENT:
         value: ${{ jobs.tests-complete.outputs.PR_COMMENT }}
         description: Comment for release PR
 
@@ -288,6 +287,8 @@ jobs:
       - name: Merge playwright reports
         if: needs.add-check-and-prepare-instance.outputs.FRAMEWORK == 'Playwright-tests'
         uses: ./.github/actions/merge-pw-reports
+        with:
+          PASSWORD_FOR_DECODING_ARTIFACT: ${{ secrets.TESTS_RESULT_PASSWORD }}
 
       - name: Merge cypress reports
         if: needs.add-check-and-prepare-instance.outputs.FRAMEWORK == 'Cypress-tests'