add github workflows

.github/workflows/specs.yml

@@ -0,0 +1,62 @@
+name: Run Specs
+
+on:
+  push:
+permissions:
+  contents: read
+  # We need write access to the id-token to use workload identity federation
+  id-token: write
+  packages: read
+  # Needed for getting PR labels
+  pull-requests: read
+
+
+env:
+  PGDATABASE: que-test
+  PGUSER: ubuntu
+  PGPASSWORD: password
+  PGHOST: localhost
+
+jobs:
+  bundle_install_and_cache:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: gocardless/github-actions/actions/ruby-bundle-install@master
+        with:
+          known_hosts: ${{ secrets.KNOWN_HOSTS_GITHUB_KEY }}
+          robot_ssh_key: ${{ secrets.ROBOT_READONLY_SSH_KEY }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+          install_postgres_lib: "yes"
+
+  rspec:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        ruby_version: ["2.6", "2.7", "3.0"]
+
+    services:
+      postgres:
+        image: postgres:11.2
+        env:
+          POSTGRES_DB: que-test
+          POSTGRES_USER: ubuntu
+          POSTGRES_PASSWORD: password
+          POSTGRES_HOST_AUTH_METHOD: trust
+        ports:
+          - 5432:5432
+    needs:
+      - bundle_install_and_cache
+
+    steps:
+      - uses: actions/checkout@v2
+      - uses: gocardless/github-actions/actions/ruby-bundle-install@master
+        with:
+          known_hosts: ${{ secrets.KNOWN_HOSTS_GITHUB_KEY }}
+          robot_ssh_key: ${{ secrets.ROBOT_READONLY_SSH_KEY }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Run Specs
+        run: |
+          bundle exec rspec