@catladder/cli 0.0.0-next-e9e5af68 → 0.0.0-next-1c65899f

package/dist/cli/src/apps/cli/commands/project/setup/setupKubernetes.js

@@ -1,13 +1,8 @@
 "use strict";
-
-var __importDefault = this && this.__importDefault || function (mod) {
-  return mod && mod.__esModule ? mod : {
-    "default": mod
-  };
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
 };
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.setupKubernetes = void 0;
 const pipeline_1 = require("../../../../../../../pipeline/src/index.js");
 const child_process_promise_1 = require("child-process-promise");
@@ -15,48 +10,47 @@ const cluster_1 = require("../../../../../utils/cluster");
 const gitlab_1 = require("../../../../../utils/gitlab");
 const ensureNamespace_1 = __importDefault(require("../utils/ensureNamespace"));
 const setupKubernetes = async (instance, context) => {
-  var _a;
-  const deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
-  if (!(0, pipeline_1.isOfDeployType)(deployConfig, "kubernetes")) {
-    throw new Error("cannot run setupKubernetes on non-kubernetes deployments");
-  }
-  const {
-    id: projectId
-  } = await (0, gitlab_1.getProjectInfo)(instance);
-  const deploy_tokens = await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/deploy_tokens`);
-  if (!deploy_tokens.find(v => v.name === "gitlab-deploy-token")) {
-    instance.log("I will setup the 'GitLab Deploy Token', so Kubernetes can pull images from this project.");
-    await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/deploy_tokens`, {
-      id: projectId,
-      name: "gitlab-deploy-token",
-      scopes: ["read_registry"]
-    }, "POST");
-  }
-  const fullName = (0, pipeline_1.getFullKubernetesClusterName)(deployConfig.cluster);
-  instance.log(`cluster: ${fullName}`);
-  await (0, cluster_1.connectToCluster)(fullName);
-  instance.log("");
-  instance.log("ensuring namespace ...");
-  const namespace = await (0, ensureNamespace_1.default)(context);
-  instance.log("Namespace " + namespace + " created / updated!");
-  instance.log("");
-  //$.verbose = true;
-  // we name the service account and the role and the role binding with the same name
-  // we currently create one per component to better separate them
-  instance.log("ensuring service accounts...");
-  const serviceAccountName = `cl-${context.name}-deploy`;
-  const KUBE_URL = await (0, child_process_promise_1.exec)(`TERM=dumb kubectl cluster-info | grep -E 'Kubernetes master|Kubernetes control plane' | awk '/http/ {print $NF}'`).then(s => s.stdout.trim());
-  // first upsert service acount in the ns
-  try {
-    await (0, child_process_promise_1.exec)(`kubectl delete serviceaccount --namespace ${namespace} ${serviceAccountName}`);
-    await (0, child_process_promise_1.exec)(`kubectl delete rolebinding --namespace ${namespace} ${serviceAccountName}`);
-    await (0, child_process_promise_1.exec)(`kubectl delete role --namespace ${namespace} ${serviceAccountName}`);
-  } catch (e) {
-    // ignore
-  }
-  await (0, child_process_promise_1.exec)(`kubectl create serviceaccount --namespace ${namespace} ${serviceAccountName}`);
-  // upsert role in the ns
-  await (0, child_process_promise_1.exec)(`cat <<EOF | kubectl apply -f -
+    var _a;
+    const deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
+    if (!(0, pipeline_1.isOfDeployType)(deployConfig, "kubernetes")) {
+        throw new Error("cannot run setupKubernetes on non-kubernetes deployments");
+    }
+    const { id: projectId } = await (0, gitlab_1.getProjectInfo)(instance);
+    const deploy_tokens = await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/deploy_tokens`);
+    if (!deploy_tokens.find((v) => v.name === "gitlab-deploy-token")) {
+        instance.log("I will setup the 'GitLab Deploy Token', so Kubernetes can pull images from this project.");
+        await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/deploy_tokens`, {
+            id: projectId,
+            name: "gitlab-deploy-token",
+            scopes: ["read_registry"],
+        }, "POST");
+    }
+    const fullName = (0, pipeline_1.getFullKubernetesClusterName)(deployConfig.cluster);
+    instance.log(`cluster: ${fullName}`);
+    await (0, cluster_1.connectToCluster)(fullName);
+    instance.log("");
+    instance.log("ensuring namespace ...");
+    const namespace = await (0, ensureNamespace_1.default)(context);
+    instance.log("Namespace " + namespace + " created / updated!");
+    instance.log("");
+    //$.verbose = true;
+    // we name the service account and the role and the role binding with the same name
+    // we currently create one per component to better separate them
+    instance.log("ensuring service accounts...");
+    const serviceAccountName = `cl-${context.name}-deploy`;
+    const KUBE_URL = await (0, child_process_promise_1.exec)(`TERM=dumb kubectl cluster-info | grep -E 'Kubernetes master|Kubernetes control plane' | awk '/http/ {print $NF}'`).then((s) => s.stdout.trim());
+    // first upsert service acount in the ns
+    try {
+        await (0, child_process_promise_1.exec)(`kubectl delete serviceaccount --namespace ${namespace} ${serviceAccountName}`);
+        await (0, child_process_promise_1.exec)(`kubectl delete rolebinding --namespace ${namespace} ${serviceAccountName}`);
+        await (0, child_process_promise_1.exec)(`kubectl delete role --namespace ${namespace} ${serviceAccountName}`);
+    }
+    catch (e) {
+        // ignore
+    }
+    await (0, child_process_promise_1.exec)(`kubectl create serviceaccount --namespace ${namespace} ${serviceAccountName}`);
+    // upsert role in the ns
+    await (0, child_process_promise_1.exec)(`cat <<EOF | kubectl apply -f -
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -82,9 +76,9 @@ roleRef:
   apiGroup: rbac.authorization.k8s.io
 EOF
 `);
-  const secretName = `${serviceAccountName}-secret`;
-  // create token for the service account
-  await (0, child_process_promise_1.exec)(`
+    const secretName = `${serviceAccountName}-secret`;
+    // create token for the service account
+    await (0, child_process_promise_1.exec)(`
 kubectl apply -f - <<EOF
 apiVersion: v1
 kind: Secret
@@ -96,21 +90,26 @@ metadata:
 type: kubernetes.io/service-account-token
 EOF
   `);
-  const KUBE_CA_PEM = await (0, child_process_promise_1.exec)(`kubectl get secret ${secretName} --namespace ${namespace} -o jsonpath="{['data']['ca\\.crt']}"`).then(c => c.stdout.trim());
-  const KUBE_TOKEN = await (0, child_process_promise_1.exec)(`kubectl get secret ${secretName} --namespace ${namespace} -o jsonpath="{['data']['token']}" | base64 --decode`).then(c => c.stdout.trim());
-  const vars = {
-    KUBE_TOKEN,
-    KUBE_CA_PEM,
-    KUBE_URL
-  };
-  const missing = Object.entries(vars).filter(e => !e[1]);
-  if (missing.length > 0) {
-    throw new Error("could not setup credentials. Missing vars: " + missing.map(m => m[0]).join(", ") + ". Check whether your local kubectl is still working for '" + fullName + "'");
-  }
-  instance.log("service accounts created / updated!");
-  instance.log("");
-  instance.log("pusing secrets to gitlab...");
-  await (0, gitlab_1.upsertAllVariables)(instance, vars, context.env, context.name, false);
-  instance.log("done!");
+    const KUBE_CA_PEM = await (0, child_process_promise_1.exec)(`kubectl get secret ${secretName} --namespace ${namespace} -o jsonpath="{['data']['ca\\.crt']}"`).then((c) => c.stdout.trim());
+    const KUBE_TOKEN = await (0, child_process_promise_1.exec)(`kubectl get secret ${secretName} --namespace ${namespace} -o jsonpath="{['data']['token']}" | base64 --decode`).then((c) => c.stdout.trim());
+    const vars = {
+        KUBE_TOKEN,
+        KUBE_CA_PEM,
+        KUBE_URL,
+    };
+    const missing = Object.entries(vars).filter((e) => !e[1]);
+    if (missing.length > 0) {
+        throw new Error("could not setup credentials. Missing vars: " +
+            missing.map((m) => m[0]).join(", ") +
+            ". Check whether your local kubectl is still working for '" +
+            fullName +
+            "'");
+    }
+    instance.log("service accounts created / updated!");
+    instance.log("");
+    instance.log("pusing secrets to gitlab...");
+    await (0, gitlab_1.upsertAllVariables)(instance, vars, context.env, context.name, false);
+    instance.log("done!");
 };
-exports.setupKubernetes = setupKubernetes;
+exports.setupKubernetes = setupKubernetes;
+//# sourceMappingURL=setupKubernetes.js.map

package/dist/cli/src/apps/cli/commands/project/setup/setupTopic.d.ts

@@ -1,2 +1,2 @@
 import type { IO } from "../../../../../core/types";
-export declare const setupTopic: (instance: IO) => Promise<void>;
+export declare const setupTopic: (instance: IO) => Promise<void>;

package/dist/cli/src/apps/cli/commands/project/setup/setupTopic.js

@@ -1,20 +1,12 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.setupTopic = void 0;
 const gitlab_1 = require("../../../../../utils/gitlab");
 const catladderTopic = "catladder";
-const setupTopic = async instance => {
-  const {
-    id: projectId
-  } = await (0, gitlab_1.getProjectInfo)(instance);
-  const {
-    topics
-  } = await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}`);
-  await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}`, {
-    topics: [catladderTopic, ...topics]
-  }, "PUT");
+const setupTopic = async (instance) => {
+    const { id: projectId } = await (0, gitlab_1.getProjectInfo)(instance);
+    const { topics } = await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}`);
+    await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}`, { topics: [catladderTopic, ...topics] }, "PUT");
 };
-exports.setupTopic = setupTopic;
+exports.setupTopic = setupTopic;
+//# sourceMappingURL=setupTopic.js.map

package/dist/cli/src/apps/cli/commands/project/utils/autocompletions.d.ts

@@ -1,4 +1,4 @@
 export declare const allEnvs: () => Promise<string[]>;
 export declare const allComponents: () => Promise<string[]>;
 export declare const envAndComponents: () => Promise<string[]>;
-export declare const allEnvsAndAllComponents: () => Promise<string[]>;
+export declare const allEnvsAndAllComponents: () => Promise<string[]>;

package/dist/cli/src/apps/cli/commands/project/utils/autocompletions.js

@@ -1,36 +1,31 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.allEnvsAndAllComponents = exports.envAndComponents = exports.allComponents = exports.allEnvs = void 0;
 const pipeline_1 = require("../../../../../../../pipeline/src/index.js");
 const getProjectConfig_1 = require("../../../../../config/getProjectConfig");
 const allEnvs = async () => {
-  const config = await (0, getProjectConfig_1.getProjectConfig)();
-  if (!config) {
-    return [];
-  }
-  return (0, pipeline_1.getAllEnvsInAllComponents)(config);
+    const config = await (0, getProjectConfig_1.getProjectConfig)();
+    if (!config) {
+        return [];
+    }
+    return (0, pipeline_1.getAllEnvsInAllComponents)(config);
 };
 exports.allEnvs = allEnvs;
 const allComponents = async () => {
-  const config = await (0, getProjectConfig_1.getProjectConfig)();
-  if (!config) {
-    return [];
-  }
-  return Object.keys(config.components);
+    const config = await (0, getProjectConfig_1.getProjectConfig)();
+    if (!config) {
+        return [];
+    }
+    return Object.keys(config.components);
 };
 exports.allComponents = allComponents;
 const envAndComponents = async () => {
-  const allEnvAndcomponents = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsFlat)();
-  return allEnvAndcomponents.reduce((acc, {
-    env,
-    componentName
-  }) => [...acc, env + ":" + componentName], []);
+    const allEnvAndcomponents = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsFlat)();
+    return allEnvAndcomponents.reduce((acc, { env, componentName }) => [...acc, env + ":" + componentName], []);
 };
 exports.envAndComponents = envAndComponents;
 const allEnvsAndAllComponents = async () => {
-  return [...(await (0, exports.allEnvs)()), ...(await (0, exports.envAndComponents)())];
+    return [...(await (0, exports.allEnvs)()), ...(await (0, exports.envAndComponents)())];
 };
-exports.allEnvsAndAllComponents = allEnvsAndAllComponents;
+exports.allEnvsAndAllComponents = allEnvsAndAllComponents;
+//# sourceMappingURL=autocompletions.js.map

package/dist/cli/src/apps/cli/commands/project/utils/ensureCluster.d.ts

@@ -6,4 +6,4 @@ import type { IO } from "../../../../../core/types";
  * Accepts an IO instance for logging and prompting.
  * Also works with Vorpal's CommandInstance via .call(this, envComponent) for backward compatibility.
  */
-export declare function ensureCluster(io: IO, envComponent: string): Promise<void>;
+export declare function ensureCluster(io: IO, envComponent: string): Promise<void>;

package/dist/cli/src/apps/cli/commands/project/utils/ensureCluster.js

@@ -1,8 +1,5 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.ensureCluster = void 0;
 const pipeline_1 = require("../../../../../../../pipeline/src/index.js");
 const getProjectConfig_1 = require("../../../../../config/getProjectConfig");
@@ -15,27 +12,26 @@ const cluster_1 = require("../../../../../utils/cluster");
  * Also works with Vorpal's CommandInstance via .call(this, envComponent) for backward compatibility.
  */
 async function ensureCluster(io, envComponent) {
-  var _a, _b;
-  const {
-    env,
-    componentName
-  } = (0, getProjectConfig_1.parseChoice)(envComponent);
-  const context = await (0, getProjectConfig_1.getPipelineContextByChoice)(env, componentName);
-  if (!(0, pipeline_1.isOfDeployType)((_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config, "kubernetes")) {
-    throw new Error("can't ensure cluster for non-kubernetes deployments");
-  }
-  const cluster = (0, pipeline_1.getFullKubernetesClusterName)((_b = context.deploy) === null || _b === void 0 ? void 0 : _b.config.cluster);
-  const connectedClusterName = await (0, cluster_1.getCurrentConnectedClusterName)();
-  if (cluster !== connectedClusterName) {
-    io.log(`you are currently connected to cluster '${connectedClusterName}'`);
-    io.log(`but the project requires cluster '${cluster}'`);
-    const shouldContinue = await io.confirm(`Do you want to connect to '${cluster}'?`);
-    if (!shouldContinue) {
-      io.log("abort");
-    } else {
-      await (0, cluster_1.connectToCluster)(cluster);
-      io.log(`connected to cluster '${cluster}'`);
+    var _a, _b;
+    const { env, componentName } = (0, getProjectConfig_1.parseChoice)(envComponent);
+    const context = await (0, getProjectConfig_1.getPipelineContextByChoice)(env, componentName);
+    if (!(0, pipeline_1.isOfDeployType)((_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config, "kubernetes")) {
+        throw new Error("can't ensure cluster for non-kubernetes deployments");
+    }
+    const cluster = (0, pipeline_1.getFullKubernetesClusterName)((_b = context.deploy) === null || _b === void 0 ? void 0 : _b.config.cluster);
+    const connectedClusterName = await (0, cluster_1.getCurrentConnectedClusterName)();
+    if (cluster !== connectedClusterName) {
+        io.log(`you are currently connected to cluster '${connectedClusterName}'`);
+        io.log(`but the project requires cluster '${cluster}'`);
+        const shouldContinue = await io.confirm(`Do you want to connect to '${cluster}'?`);
+        if (!shouldContinue) {
+            io.log("abort");
+        }
+        else {
+            await (0, cluster_1.connectToCluster)(cluster);
+            io.log(`connected to cluster '${cluster}'`);
+        }
     }
-  }
 }
-exports.ensureCluster = ensureCluster;
+exports.ensureCluster = ensureCluster;
+//# sourceMappingURL=ensureCluster.js.map

package/dist/cli/src/apps/cli/commands/project/utils/ensureNamespace.d.ts

@@ -1,2 +1,2 @@
 import type { ComponentContext } from "../../../../../../../pipeline/src/index.js";
-export default function (context: ComponentContext): Promise<string>;
+export default function (context: ComponentContext): Promise<string>;

package/dist/cli/src/apps/cli/commands/project/utils/ensureNamespace.js

@@ -1,43 +1,38 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 const pipeline_1 = require("../../../../../../../pipeline/src/index.js");
 const client_node_1 = require("@kubernetes/client-node");
 const k8sApi_1 = require("../../../../../k8sApi");
 async function default_1(context) {
-  var _a, _b, _c, _d, _e;
-  const namespace = (0, pipeline_1.getKubernetesNamespace)(context.fullConfig, context.env);
-  const namespaceBody = new client_node_1.V1Namespace();
-  const metadata = {
-    name: namespace,
-    labels: {
-      customerName: context.fullConfig.customerName,
-      appName: context.fullConfig.appName,
-      environment: context.env,
-      components: Object.keys(context.fullConfig.components).join("_"),
-      // limited chars available...
-      ...((_b = (_a = context.fullConfig.meta) === null || _a === void 0 ? void 0 : _a.labels) !== null && _b !== void 0 ? _b : {})
+    var _a, _b, _c, _d, _e;
+    const namespace = (0, pipeline_1.getKubernetesNamespace)(context.fullConfig, context.env);
+    const namespaceBody = new client_node_1.V1Namespace();
+    const metadata = {
+        name: namespace,
+        labels: {
+            customerName: context.fullConfig.customerName,
+            appName: context.fullConfig.appName,
+            environment: context.env,
+            components: Object.keys(context.fullConfig.components).join("_"), // limited chars available...
+            ...((_b = (_a = context.fullConfig.meta) === null || _a === void 0 ? void 0 : _a.labels) !== null && _b !== void 0 ? _b : {}),
+        },
+    };
+    namespaceBody.metadata = metadata;
+    const k8sApi = (0, k8sApi_1.getk8sApi)();
+    try {
+        await k8sApi.readNamespace(namespace);
+        await k8sApi.patchNamespace(namespace, namespaceBody, undefined, undefined, undefined, undefined, { headers: { "content-type": "application/merge-patch+json" } }); // update meta data
     }
-  };
-  namespaceBody.metadata = metadata;
-  const k8sApi = (0, k8sApi_1.getk8sApi)();
-  try {
-    await k8sApi.readNamespace(namespace);
-    await k8sApi.patchNamespace(namespace, namespaceBody, undefined, undefined, undefined, undefined, {
-      headers: {
-        "content-type": "application/merge-patch+json"
-      }
-    }); // update meta data
-  } catch (e) {
-    if (((_d = (_c = e.response) === null || _c === void 0 ? void 0 : _c.body) === null || _d === void 0 ? void 0 : _d.reason) === "NotFound") {
-      await k8sApi.createNamespace(namespaceBody);
-    } else {
-      console.error((_e = e.response) === null || _e === void 0 ? void 0 : _e.body);
-      throw e;
+    catch (e) {
+        if (((_d = (_c = e.response) === null || _c === void 0 ? void 0 : _c.body) === null || _d === void 0 ? void 0 : _d.reason) === "NotFound") {
+            await k8sApi.createNamespace(namespaceBody);
+        }
+        else {
+            console.error((_e = e.response) === null || _e === void 0 ? void 0 : _e.body);
+            throw e;
+        }
     }
-  }
-  return namespace;
+    return namespace;
 }
-exports.default = default_1;
+exports.default = default_1;
+//# sourceMappingURL=ensureNamespace.js.map

package/dist/cli/src/apps/cli/utils/getGoogleAuthUserNumber.d.ts

@@ -1,2 +1,2 @@
 import type { IO } from "../../../core/types";
-export declare const getGoogleAuthUserNumber: (io: IO) => Promise<string>;
+export declare const getGoogleAuthUserNumber: (io: IO) => Promise<string>;

package/dist/cli/src/apps/cli/utils/getGoogleAuthUserNumber.js

@@ -1,22 +1,20 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.getGoogleAuthUserNumber = void 0;
 const preferences_1 = require("../../../utils/preferences");
 const KEY = "googleAuthUserNumber";
-const getGoogleAuthUserNumber = async io => {
-  if (!(await (0, preferences_1.hasPreference)(KEY))) {
-    io.log("Please type in your google auth user number (0 if you have only one google account or maybe 1 if you have multiple)");
-    const authUserNumber = await io.promptDirect({
-      type: "number",
-      name: "authUserNumber",
-      default: 0,
-      message: "Auth user "
-    });
-    await (0, preferences_1.setPreference)(KEY, authUserNumber);
-  }
-  return (0, preferences_1.getPreference)(KEY);
+const getGoogleAuthUserNumber = async (io) => {
+    if (!(await (0, preferences_1.hasPreference)(KEY))) {
+        io.log("Please type in your google auth user number (0 if you have only one google account or maybe 1 if you have multiple)");
+        const authUserNumber = await io.promptDirect({
+            type: "number",
+            name: "authUserNumber",
+            default: 0,
+            message: "Auth user ",
+        });
+        await (0, preferences_1.setPreference)(KEY, authUserNumber);
+    }
+    return (0, preferences_1.getPreference)(KEY);
 };
-exports.getGoogleAuthUserNumber = getGoogleAuthUserNumber;
+exports.getGoogleAuthUserNumber = getGoogleAuthUserNumber;
+//# sourceMappingURL=getGoogleAuthUserNumber.js.map

package/dist/cli/src/catci.d.ts

@@ -1 +1 @@
-export {};
+export {};

package/dist/cli/src/catci.js

@@ -1,8 +1,5 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 /**
  * catci — catladder's CI companion.
  *
@@ -41,76 +38,77 @@ usage:
       github only: dispatches the generated taggedRelease workflow for
       the tag (tags pushed with the job token don't trigger it)
 `;
-const fail = message => {
-  console.error(message);
-  process.exit(1);
+const fail = (message) => {
+    console.error(message);
+    process.exit(1);
 };
 /**
  * shared gate: evaluates the audit document and prints the overview.
  * Returns null when the document could not be evaluated (missing or
  * unparseable) so the caller can decide on remediation.
  */
-const evaluateGate = async path => {
-  const evaluation = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({
-    path
-  });
-  if (evaluation.isErr()) {
-    return null;
-  }
-  if (evaluation.value.score.answeredTopics === 0) {
-    fail(`audit document has no answered topics\n` + `please answer security topics in ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} by adding responsible people and check/cross in the table`);
-  }
-  console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(evaluation.value));
-  return evaluation.value;
+const evaluateGate = async (path) => {
+    const evaluation = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path });
+    if (evaluation.isErr()) {
+        return null;
+    }
+    if (evaluation.value.score.answeredTopics === 0) {
+        fail(`audit document has no answered topics\n` +
+            `please answer security topics in ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} by adding responsible people and check/cross in the table`);
+    }
+    console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(evaluation.value));
+    return evaluation.value;
 };
-const securityAuditCheck = async path => {
-  const evaluation = await evaluateGate(path);
-  if (!evaluation) {
-    fail(`could not evaluate ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}\n` + `please add a ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} security audit document to the repository ` + `(run \`catladder security audit create\` locally to generate the template)`);
-  }
+const securityAuditCheck = async (path) => {
+    const evaluation = await evaluateGate(path);
+    if (!evaluation) {
+        fail(`could not evaluate ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}\n` +
+            `please add a ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} security audit document to the repository ` +
+            `(run \`catladder security audit create\` locally to generate the template)`);
+    }
 };
 const securityAuditCiJob = async (path, token, mainBranch, projectId, userId) => {
-  const evaluation = await evaluateGate(path);
-  if (evaluation) {
-    return;
-  }
-  console.log("could not evaluate security audit document");
-  console.log("creating new merge request with security audit template...");
-  const api = new rest_1.Gitlab({
-    host: GITLAB_HOST,
-    token
-  });
-  const mr = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
-    api,
-    mainBranch,
-    projectId,
-    userId: parseInt(userId)
-  });
-  if (mr.isErr()) {
-    fail(`could not create merge request with security audit template: ${mr.error}`);
-    return;
-  }
-  console.log("security audit merge request created successfully");
-  console.log(`please finish the MR by updating ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}: ${mr.value.web_url}`);
-  process.exit(1);
+    const evaluation = await evaluateGate(path);
+    if (evaluation) {
+        return;
+    }
+    console.log("could not evaluate security audit document");
+    console.log("creating new merge request with security audit template...");
+    const api = new rest_1.Gitlab({ host: GITLAB_HOST, token });
+    const mr = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+        api,
+        mainBranch,
+        projectId,
+        userId: parseInt(userId),
+    });
+    if (mr.isErr()) {
+        fail(`could not create merge request with security audit template: ${mr.error}`);
+        return;
+    }
+    console.log("security audit merge request created successfully");
+    console.log(`please finish the MR by updating ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}: ${mr.value.web_url}`);
+    process.exit(1);
 };
 const main = async () => {
-  const [group, command, ...args] = process.argv.slice(2);
-  if (group === "security-audit" && command === "ci-job" && args.length === 5) {
-    const [path, token, mainBranch, projectId, userId] = args;
-    return securityAuditCiJob(path, token, mainBranch, projectId, userId);
-  }
-  if (group === "security-audit" && command === "check" && args.length === 1) {
-    return securityAuditCheck(args[0]);
-  }
-  if (group === "release" && command === "changesets" && args.length === 0) {
-    return (0, changesetsReleaseJob_1.changesetsReleaseJob)();
-  }
-  if (group === "release" && command === "dispatch-tagged-workflow" && args.length === 1) {
-    return (0, changesetsReleaseJob_1.dispatchTaggedReleaseWorkflow)(args[0]);
-  }
-  fail(USAGE);
+    const [group, command, ...args] = process.argv.slice(2);
+    if (group === "security-audit" && command === "ci-job" && args.length === 5) {
+        const [path, token, mainBranch, projectId, userId] = args;
+        return securityAuditCiJob(path, token, mainBranch, projectId, userId);
+    }
+    if (group === "security-audit" && command === "check" && args.length === 1) {
+        return securityAuditCheck(args[0]);
+    }
+    if (group === "release" && command === "changesets" && args.length === 0) {
+        return (0, changesetsReleaseJob_1.changesetsReleaseJob)();
+    }
+    if (group === "release" &&
+        command === "dispatch-tagged-workflow" &&
+        args.length === 1) {
+        return (0, changesetsReleaseJob_1.dispatchTaggedReleaseWorkflow)(args[0]);
+    }
+    fail(USAGE);
 };
-main().catch(error => {
-  fail(`catci failed: ${error instanceof Error ? error.message : error}`);
-});
+main().catch((error) => {
+    fail(`catci failed: ${error instanceof Error ? error.message : error}`);
+});
+//# sourceMappingURL=catci.js.map

package/dist/cli/src/catenv.d.ts

@@ -1 +1 @@
-export {};
+export {};