fix: csp for before send hash #2928

	name: Coverage

	on:
	pull_request:
	branches: [main]
	# sync codecov
	push:
	branches: [main]

	jobs:
	coverage:
	if: contains(github.event.pull_request.labels.*.name , 'skip-ci') == false
	runs-on: ubuntu-latest
	env:
	TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
	TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
	DIGITRANSIT_KEY: ${{ secrets.DIGITRANSIT_KEY }}
	NEXT_PUBLIC_DIGITRANSIT_KEY: ${{ secrets.NEXT_PUBLIC_DIGITRANSIT_KEY }}

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- uses: pnpm/action-setup@v4.2.0

	- name: Use Node.js 22.x
	uses: actions/setup-node@v4
	with:
	node-version: 22.21.1
	cache: 'pnpm'

	- name: Get pnpm store directory
	id: pnpm-cache
	shell: bash
	run: \|
	echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT

	- uses: actions/cache@v4
	name: Setup pnpm cache
	with:
	path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
	key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
	restore-keys: \|
	${{ runner.os }}-pnpm-store-

	- name: Install dependencies
	run: pnpm install

	- name: Install Playwright
	run: pnpm -C site exec playwright install chromium --with-deps

	- name: Test with coverage
	run: pnpm coverage
	env:
	TZ: Europe/Helsinki

	- name: Upload coverage reports to Codecov
	uses: codecov/codecov-action@v5
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	verbose: true

	post-test:
	needs: coverage
	runs-on: ubuntu-latest
	steps:
	- name: Exit successfully
	run: exit 0

Provide feedback