Vuln fixes in cookie, rollup, body-parser, and send deps #89
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: push | |
| jobs: | |
| build-and-upload-artifacts: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: ./.github/commands/dependencies/install_yarn_deps | |
| - name: Build | |
| run: yarn build | |
| - uses: actions/upload-artifact@v3 | |
| with: | |
| name: build-artifact | |
| path: dist/ | |
| run-karma: | |
| runs-on: ubuntu-latest | |
| env: | |
| BROWSERSTACK_USERNAME: ${{ secrets.BROWSERSTACK_USERNAME }} | |
| BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }} | |
| timeout-minutes: 10 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: ./.github/commands/dependencies/install_yarn_deps | |
| - run: yarn test:browserstack | |
| run-depcheck: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: ./.github/commands/dependencies/install_yarn_deps | |
| - run: yarn depcheck | |
| run-pre-commits: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 100 # need the history to do a changed files check below (source, origin) | |
| - uses: actions/setup-python@v2 | |
| - uses: ./.github/commands/dependencies/install_yarn_deps | |
| - uses: pre-commit/[email protected] | |
| build-to-npm: | |
| if: github.ref == 'refs/heads/main' | |
| runs-on: ubuntu-latest | |
| needs: | |
| # TODO: https://github.com/transcend-io/penumbra/issues/209 - fix flakiness | |
| # - run-karma | |
| - run-depcheck | |
| - build-and-upload-artifacts | |
| - run-pre-commits | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v2 | |
| - uses: ./.github/commands/dependencies/install_yarn_deps | |
| - name: Download build artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: build-artifact | |
| path: dist | |
| - name: Configure NPM authentication | |
| run: | | |
| yarn config set npmAlwaysAuth true | |
| yarn config set npmAuthToken ${{ secrets.NPM_TOKEN }} | |
| - name: Publish to yarn/npm | |
| run: yarn npm publish | |
| build-to-github-packages: | |
| if: github.ref == 'refs/heads/main' | |
| runs-on: ubuntu-latest | |
| needs: | |
| # TODO: https://github.com/transcend-io/penumbra/issues/209 - fix flakiness | |
| # - run-karma | |
| - run-depcheck | |
| - build-and-upload-artifacts | |
| - run-pre-commits | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v2 | |
| - uses: ./.github/commands/dependencies/install_yarn_deps | |
| - name: Download build artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: build-artifact | |
| path: dist | |
| - name: Configure Github Packages authentication | |
| run: | | |
| yarn config set npmAlwaysAuth true | |
| yarn config set npmRegistryServer https://npm.pkg.github.com | |
| yarn config set npmPublishRegistry https://npm.pkg.github.com | |
| yarn config set npmAuthToken ${{ secrets.GITHUB_TOKEN }} | |
| - name: Publish to Github packages | |
| run: yarn npm publish |