ci: move test report to its own workflow for better security

Author: edusperoni

.github/workflows/npm_release.yml

@@ -1,3 +1,4 @@
+name: NPM Release
 on:
   push:
     branches:
@@ -90,7 +91,7 @@ jobs:
         with:
           name: debug-symbols
           path: test-app/runtime/build/intermediates/merged_native_libs/release/mergeReleaseNativeLibs/out/lib/*
-        
+
   test:
     name: Test
     runs-on: macos-15-intel
@@ -143,6 +144,12 @@ jobs:
           #target: google_apis
           arch: ${{env.ANDROID_ABI}}
           script: ./gradlew runtestsAndVerifyResults --stacktrace
+      - name: Upload Test Results
+        if: ${{ !cancelled() }} # run this step even if previous step failed
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: android-unit-test-results
+          path: test-app/dist/android_unit_test_results.xml
   publish:
     runs-on: ubuntu-latest
     environment: npm-publish

.github/workflows/pull_request.yml

@@ -1,3 +1,4 @@
+name: Pull Request
 on:
   pull_request:
 
@@ -128,10 +129,9 @@ jobs:
           #target: google_apis
           arch: ${{env.ANDROID_ABI}}
           script: ./gradlew runtestsAndVerifyResults --stacktrace
-      - name: Test Report
-        uses: dorny/test-reporter@b082adf0eced0765477756c2a610396589b8c637 # v2.5.0
+      - name: Upload Test Results
         if: ${{ !cancelled() }} # run this step even if previous step failed
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
-          name: Android Runtime Tests
+          name: android-unit-test-results
           path: test-app/dist/android_unit_test_results.xml
-          reporter: jest-junit # Format of test results

.github/workflows/test_report.yml

@@ -0,0 +1,20 @@
+name: "Test Report"
+on:
+  workflow_run:
+    workflows: ["Pull Request", "NPM Release"] # runs after Pull Request workflow
+    types:
+      - completed
+permissions:
+  contents: read
+  actions: read
+  checks: write
+jobs:
+  report:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dorny/test-reporter@b082adf0eced0765477756c2a610396589b8c637 # v2.5.0
+        with:
+          name: Android Runtime Tests
+          artifact: android-unit-test-results # artifact name
+          path: test-app/dist/android_unit_test_results.xml
+          reporter: jest-junit # Format of test results