@catladder/pipeline 1.163.1 → 1.164.0

package/examples/__snapshots__/native-app.test.ts.snap

@@ -1,6 +1,6 @@
 // Jest Snapshot v1, https://goo.gl/fbAQLP
 
-exports[`matches snapshot for cloud-run-memory-limit local pipeline YAML 1`] = `
+exports[`matches snapshot for native-app local pipeline YAML 1`] = `
 "image: path/to/docker/jobs-default:the-version
 stages:
   - setup
@@ -2148,3169 +2148,3 @@ create release:
   needs: []
 "
 `;
-
-exports[`matches snapshot for native-app 1`] = `
-{
-  "mainBranch": {
-    "image": "path/to/docker/jobs-default:the-version",
-    "jobs": {
-      "api 👮 lint": {
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-node-modules",
-            "paths": [
-              "api/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="api"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd api",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn lint",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🔨 app | dev ": {
-        "artifacts": {
-          "expire_in": "1 day",
-          "paths": [
-            "api/__build_info.json",
-            "api/.next",
-            "api/dist",
-          ],
-          "reports": {
-            "junit": undefined,
-          },
-          "when": "always",
-        },
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-node-modules",
-            "paths": [
-              "api/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-next-cache",
-            "paths": [
-              "api/.next/cache",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="dev"",
-          "export APP_DIR="api"",
-          "export ENV_TYPE="dev"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL="https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_INTERNAL="$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_CANONICAL="$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL_INTERNAL="https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export DEPLOY_CLOUD_RUN_PROJECT_ID="asdf"",
-          "export DEPLOY_CLOUD_RUN_REGION="asia-east1"",
-          "export GCLOUD_DEPLOY_credentialsKey="$CL_dev_api_GCLOUD_DEPLOY_credentialsKey"",
-          "export GCLOUD_RUN_canonicalHostSuffix="$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"DEPLOY_CLOUD_RUN_PROJECT_ID\\",\\"DEPLOY_CLOUD_RUN_REGION\\",\\"GCLOUD_DEPLOY_credentialsKey\\",\\"GCLOUD_RUN_canonicalHostSuffix\\"]"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > api/__build_info.json",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd api",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn build",
-        ],
-        "stage": "build",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🔨 docker | dev ": {
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull",
-          },
-        ],
-        "image": "path/to/docker/docker-build:the-version",
-        "interruptible": true,
-        "needs": [
-          "api 🔨 app | dev ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_DIR="api"",
-          "export DOCKER_BUILD_CONTEXT="."",
-          "export DOCKER_REGISTRY="asia-east1-docker.pkg.dev"",
-          "export DOCKER_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api"",
-          "export DOCKER_CACHE_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api"",
-          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
-          "export DOCKER_COPY_AND_INSTALL_APP="COPY --chown=node:node $APP_DIR .
-RUN yarn plugin import workspace-tools
-RUN yarn workspaces focus --production && yarn rebuild"",
-          "export DOCKER_COPY_WORKSPACE_FILES="COPY --chown=node:node api/package.json /app/api/package.json
-COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
-COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
-COPY --chown=node:node .yarn /app/.yarn"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "ensureNodeDockerfile",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
-          "gcloud auth configure-docker asia-east1-docker.pkg.dev",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
-          "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile $DOCKER_BUILD_CONTEXT --build-arg BUILDKIT_INLINE_CACHE=1",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
-          "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
-          "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
-          "docker push $DOCKER_CACHE_IMAGE",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
-        ],
-        "services": [
-          {
-            "command": [
-              "--tls=false",
-            ],
-            "name": "docker:24.0.6-dind",
-          },
-        ],
-        "stage": "build",
-        "variables": {
-          "DOCKER_BUILDKIT": "1",
-          "DOCKER_DRIVER": "overlay2",
-          "DOCKER_HOST": "tcp://0.0.0.0:2375",
-          "DOCKER_TLS_CERTDIR": "",
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "2Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🚀 Deploy | dev ": {
-        "allow_failure": false,
-        "artifacts": {
-          "reports": {
-            "dotenv": "gitlab_environment.env",
-          },
-        },
-        "environment": {
-          "auto_stop_in": "4 weeks",
-          "name": "dev/api",
-          "on_stop": "api 🛑 Stop ⚠️ | dev ",
-          "url": "$CL_GITLAB_ENVIRONMENT_URL",
-        },
-        "image": "path/to/docker/gcloud:the-version",
-        "interruptible": true,
-        "needs": [
-          {
-            "artifacts": false,
-            "job": "api 👮 lint",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🔨 app | dev ",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🔨 docker | dev ",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🧪 test",
-          },
-          {
-            "artifacts": true,
-            "job": "api 🧾 sbom | dev ",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🛡 audit",
-          },
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "when": "on_success",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="dev"",
-          "export APP_DIR="api"",
-          "export ENV_TYPE="dev"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL="https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_INTERNAL="$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_CANONICAL="$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL_INTERNAL="https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export DEPLOY_CLOUD_RUN_PROJECT_ID="asdf"",
-          "export DEPLOY_CLOUD_RUN_REGION="asia-east1"",
-          "export GCLOUD_DEPLOY_credentialsKey="$CL_dev_api_GCLOUD_DEPLOY_credentialsKey"",
-          "export GCLOUD_RUN_canonicalHostSuffix="$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"DEPLOY_CLOUD_RUN_PROJECT_ID\\",\\"DEPLOY_CLOUD_RUN_REGION\\",\\"GCLOUD_DEPLOY_credentialsKey\\",\\"GCLOUD_RUN_canonicalHostSuffix\\"]"",
-          "export DOCKER_REGISTRY="asia-east1-docker.pkg.dev"",
-          "export DOCKER_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api"",
-          "export DOCKER_CACHE_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api"",
-          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
-          "export CLOUDSDK_CORE_DISABLE_PROMPTS="1"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
-          "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe asdf --format="value(projectNumber)")",
-          "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):writeenvvars[collapsed=true]\\r\\e[0KWrite env vars to file"",
-          "cat > ____envvars.yaml <<EOF
-ENV_SHORT: |-
-  dev
-APP_DIR: |-
-  api
-ENV_TYPE: |-
-  dev
-BUILD_INFO_BUILD_ID: |-
-$(printf %s "$(git describe --tags 2>/dev/null || git rev-parse HEAD)" | sed 's/^/  /')
-BUILD_INFO_BUILD_TIME: |-
-$(printf %s "$CI_JOB_STARTED_AT" | sed 's/^/  /')
-BUILD_INFO_CURRENT_VERSION: |-
-$(printf %s "$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")" | sed 's/^/  /')
-HOST: |-
-$(printf %s "$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-ROOT_URL: |-
-$(printf %s "https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-HOST_INTERNAL: |-
-$(printf %s "$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-HOST_CANONICAL: |-
-$(printf %s "$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-ROOT_URL_INTERNAL: |-
-$(printf %s "https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-DEPLOY_CLOUD_RUN_PROJECT_ID: |-
-  asdf
-DEPLOY_CLOUD_RUN_REGION: |-
-  asia-east1
-GCLOUD_RUN_canonicalHostSuffix: |-
-$(printf %s "$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | sed 's/^/  /')
-_ALL_ENV_VAR_KEYS: |-
-  ["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_BUILD_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_INTERNAL","HOST_CANONICAL","ROOT_URL_INTERNAL","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]
-
-EOF
-",
-          "echo -e "\\e[0Ksection_end:$(date +%s):writeenvvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
-          "gcloud run deploy pan-test-app-dev-api --command="yarn,start" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=dev,env-name=dev,build-type=node,cloud-run-service-name=pan-test-app-dev-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
-          "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
-          "gcloud run revisions list --project=asdf --region=asia-east1 --service=pan-test-app-dev-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=asdf --region=asia-east1 --quiet $revisionname ; done",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api@$version --quiet --delete-tags; done",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
-          "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
-          "echo 'Uploading SBOM to Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" "__sbom.json" vex.json || true",
-          "echo "CL_GITLAB_ENVIRONMENT_URL=https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" >> gitlab_environment.env",
-        ],
-        "stage": "deploy dev",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "api 🛑 Stop ⚠️ | dev ": {
-        "allow_failure": true,
-        "artifacts": {
-          "reports": {
-            "dotenv": "gitlab_environment.env",
-          },
-        },
-        "environment": {
-          "action": "stop",
-          "name": "dev/api",
-          "url": "$CL_GITLAB_ENVIRONMENT_URL",
-        },
-        "image": "path/to/docker/gcloud:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
-            "when": "on_success",
-          },
-          {
-            "when": "manual",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export CLOUDSDK_CORE_DISABLE_PROMPTS="1"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "set +e",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_dev_api_GCLOUD_DEPLOY_credentialsKey")",
-          "gcloud run services delete pan-test-app-dev-api --project=asdf --region=asia-east1",
-          "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/dev/api --quiet --delete-tags",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
-          "echo 'Disabling component in Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" || true",
-          "set -e",
-          "echo "CL_GITLAB_ENVIRONMENT_URL=https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" >> gitlab_environment.env",
-        ],
-        "stage": "stop dev",
-        "variables": {
-          "GIT_STRATEGY": "none",
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "api 🛡 audit": {
-        "allow_failure": true,
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="api"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "cd api",
-          "yarn npm audit --environment production",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🧪 test": {
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-node-modules",
-            "paths": [
-              "api/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-testing-chrome:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="api"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd api",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn test",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🧾 sbom | dev ": {
-        "allow_failure": true,
-        "artifacts": {
-          "paths": [
-            "__sbom.json",
-          ],
-        },
-        "image": "aquasec/trivy:0.38.3",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
-        ],
-        "stage": "build",
-        "variables": {},
-      },
-      "app 👮 lint": {
-        "cache": [
-          {
-            "key": "app-yarn",
-            "paths": [
-              "app/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-node-modules",
-            "paths": [
-              "app/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="app"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd app",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn lint",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🔨 app | dev ": {
-        "artifacts": {
-          "exclude": [
-            "app/.env",
-          ],
-          "expire_in": "1 day",
-          "paths": [
-            "app/__build_info.json",
-            "app/.next",
-            "app/dist",
-          ],
-          "reports": {
-            "junit": undefined,
-          },
-          "when": "always",
-        },
-        "cache": [
-          {
-            "key": {
-              "files": [
-                "app/Gemfile.lock",
-              ],
-            },
-            "paths": [
-              "app/vendor",
-            ],
-          },
-          {
-            "key": "app-yarn",
-            "paths": [
-              "app/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-node-modules",
-            "paths": [
-              "app/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-next-cache",
-            "paths": [
-              "app/.next/cache",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="dev"",
-          "export APP_DIR="app"",
-          "export ENV_TYPE="dev"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="unknown-host.example.com"",
-          "export ROOT_URL="https://unknown-host.example.com"",
-          "export HOST_INTERNAL="unknown-host.example.com"",
-          "export HOST_CANONICAL="unknown-host.example.com"",
-          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
-          "export APP_STORE_CONNECT_API_KEY_CONTENT="$CL_dev_app_APP_STORE_CONNECT_API_KEY_CONTENT"",
-          "export APP_STORE_CONNECT_ISSUER_ID="$CL_dev_app_APP_STORE_CONNECT_ISSUER_ID"",
-          "export APP_STORE_CONNECT_API_KEY_ID="$CL_dev_app_APP_STORE_CONNECT_API_KEY_ID"",
-          "export GRAPHQL_URL="https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"APP_STORE_CONNECT_API_KEY_CONTENT\\",\\"APP_STORE_CONNECT_ISSUER_ID\\",\\"APP_STORE_CONNECT_API_KEY_ID\\",\\"GRAPHQL_URL\\"]"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):write-dotenv-app[collapsed=true]\\r\\e[0Kwrite dot env"",
-          "cat <<EOF > app/.env
-ENV_SHORT=dev
-APP_DIR=app
-ENV_TYPE=dev
-HOST=unknown-host.example.com
-ROOT_URL=https://unknown-host.example.com
-HOST_INTERNAL=unknown-host.example.com
-HOST_CANONICAL=unknown-host.example.com
-ROOT_URL_INTERNAL=https://unknown-host.example.com
-APP_STORE_CONNECT_API_KEY_CONTENT=$CL_dev_app_APP_STORE_CONNECT_API_KEY_CONTENT
-APP_STORE_CONNECT_ISSUER_ID=$CL_dev_app_APP_STORE_CONNECT_ISSUER_ID
-APP_STORE_CONNECT_API_KEY_ID=$CL_dev_app_APP_STORE_CONNECT_API_KEY_ID
-GRAPHQL_URL=https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql
-_ALL_ENV_VAR_KEYS=["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_BUILD_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_INTERNAL","HOST_CANONICAL","ROOT_URL_INTERNAL","APP_STORE_CONNECT_API_KEY_CONTENT","APP_STORE_CONNECT_ISSUER_ID","APP_STORE_CONNECT_API_KEY_ID","GRAPHQL_URL"]
-EOF",
-          "echo -e "\\e[0Ksection_end:$(date +%s):write-dotenv-app\\r\\e[0K"",
-          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > app/__build_info.json",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd app",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "bundle config set --local path 'vendor/ruby'",
-          "gem install bundler",
-          "bundle install",
-          "bundle exec pod install --project-directory=ios",
-          "bundle exec fastlane build",
-        ],
-        "stage": "build",
-        "tags": [
-          "mac-runner",
-        ],
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🚀 Deploy | dev ": {
-        "allow_failure": false,
-        "cache": [
-          {
-            "key": {
-              "files": [
-                "app/Gemfile.lock",
-              ],
-            },
-            "paths": [
-              "app/vendor",
-            ],
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [
-          {
-            "artifacts": false,
-            "job": "app 👮 lint",
-          },
-          {
-            "artifacts": true,
-            "job": "app 🔨 app | dev ",
-          },
-          {
-            "artifacts": false,
-            "job": "app 🧪 test",
-          },
-          {
-            "artifacts": true,
-            "job": "app 🧾 sbom | dev ",
-          },
-          {
-            "artifacts": false,
-            "job": "app 🛡 audit",
-          },
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "when": "on_success",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="dev"",
-          "export APP_DIR="app"",
-          "export ENV_TYPE="dev"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="unknown-host.example.com"",
-          "export ROOT_URL="https://unknown-host.example.com"",
-          "export HOST_INTERNAL="unknown-host.example.com"",
-          "export HOST_CANONICAL="unknown-host.example.com"",
-          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
-          "export APP_STORE_CONNECT_API_KEY_CONTENT="$CL_dev_app_APP_STORE_CONNECT_API_KEY_CONTENT"",
-          "export APP_STORE_CONNECT_ISSUER_ID="$CL_dev_app_APP_STORE_CONNECT_ISSUER_ID"",
-          "export APP_STORE_CONNECT_API_KEY_ID="$CL_dev_app_APP_STORE_CONNECT_API_KEY_ID"",
-          "export GRAPHQL_URL="https://$(printf %s "pan-test-app-dev-api-$CL_dev_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"APP_STORE_CONNECT_API_KEY_CONTENT\\",\\"APP_STORE_CONNECT_ISSUER_ID\\",\\"APP_STORE_CONNECT_API_KEY_ID\\",\\"GRAPHQL_URL\\"]"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "cd app",
-          "bundle config set --local path 'vendor/ruby'",
-          "gem install bundler",
-          "bundle install",
-          "bundle exec fastlane deploy_test",
-          "echo 'Uploading SBOM to Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://unknown-host.example.com" "__sbom.json" vex.json || true",
-        ],
-        "stage": "deploy dev",
-        "tags": [
-          "mac-runner",
-        ],
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "app 🛡 audit": {
-        "allow_failure": true,
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="app"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "cd app",
-          "yarn npm audit --environment production",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🧪 test": {
-        "cache": [
-          {
-            "key": "app-yarn",
-            "paths": [
-              "app/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-node-modules",
-            "paths": [
-              "app/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-testing-chrome:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="app"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd app",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn test",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🧾 sbom | dev ": {
-        "allow_failure": true,
-        "artifacts": {
-          "paths": [
-            "__sbom.json",
-          ],
-        },
-        "image": "aquasec/trivy:0.38.3",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
-        ],
-        "stage": "build",
-        "variables": {},
-      },
-    },
-    "stages": [
-      "setup",
-      "setup dev",
-      "setup review",
-      "setup stage",
-      "setup prod",
-      "test",
-      "test dev",
-      "test review",
-      "test stage",
-      "test prod",
-      "build",
-      "build dev",
-      "build review",
-      "build stage",
-      "build prod",
-      "deploy",
-      "deploy dev",
-      "deploy review",
-      "deploy stage",
-      "deploy prod",
-      "verify",
-      "verify dev",
-      "verify review",
-      "verify stage",
-      "verify prod",
-      "rollback",
-      "rollback dev",
-      "rollback review",
-      "rollback stage",
-      "rollback prod",
-      "stop",
-      "stop dev",
-      "stop review",
-      "stop stage",
-      "stop prod",
-    ],
-    "variables": {
-      "ARTIFACT_COMPRESSION_LEVEL": "fast",
-      "CACHE_COMPRESSION_LEVEL": "fast",
-      "FF_USE_FASTZIP": "true",
-      "GIT_DEPTH": "1",
-      "TRANSFER_METER_FREQUENCY": "5s",
-    },
-    "workflow": {
-      "rules": [
-        {
-          "if": "$CI_COMMIT_TAG",
-        },
-        {
-          "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
-          "when": "never",
-        },
-        {
-          "if": "$CI_PIPELINE_SOURCE  == "schedule"",
-          "when": "never",
-        },
-        {
-          "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
-        },
-        {
-          "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
-        },
-        {
-          "if": "$CI_MERGE_REQUEST_ID",
-        },
-      ],
-    },
-  },
-  "mr": {
-    "image": "path/to/docker/jobs-default:the-version",
-    "jobs": {
-      "api 👮 lint": {
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-node-modules",
-            "paths": [
-              "api/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="api"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd api",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn lint",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🔨 app | review ": {
-        "artifacts": {
-          "expire_in": "1 day",
-          "paths": [
-            "api/__build_info.json",
-            "api/.next",
-            "api/dist",
-          ],
-          "reports": {
-            "junit": undefined,
-          },
-          "when": "always",
-        },
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-node-modules",
-            "paths": [
-              "api/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-next-cache",
-            "paths": [
-              "api/.next/cache",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="review"",
-          "export APP_DIR="api"",
-          "export ENV_TYPE="review"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL="https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_INTERNAL="$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_CANONICAL="$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL_INTERNAL="https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export DEPLOY_CLOUD_RUN_PROJECT_ID="asdf"",
-          "export DEPLOY_CLOUD_RUN_REGION="asia-east1"",
-          "export GCLOUD_DEPLOY_credentialsKey="$CL_review_api_GCLOUD_DEPLOY_credentialsKey"",
-          "export GCLOUD_RUN_canonicalHostSuffix="$CL_review_api_GCLOUD_RUN_canonicalHostSuffix"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"DEPLOY_CLOUD_RUN_PROJECT_ID\\",\\"DEPLOY_CLOUD_RUN_REGION\\",\\"GCLOUD_DEPLOY_credentialsKey\\",\\"GCLOUD_RUN_canonicalHostSuffix\\"]"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > api/__build_info.json",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd api",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn build",
-        ],
-        "stage": "build",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🔨 docker | review ": {
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull",
-          },
-        ],
-        "image": "path/to/docker/docker-build:the-version",
-        "interruptible": true,
-        "needs": [
-          "api 🔨 app | review ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_DIR="api"",
-          "export DOCKER_BUILD_CONTEXT="."",
-          "export DOCKER_REGISTRY="asia-east1-docker.pkg.dev"",
-          "export DOCKER_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })"",
-          "export DOCKER_CACHE_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api"",
-          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
-          "export DOCKER_COPY_AND_INSTALL_APP="COPY --chown=node:node $APP_DIR .
-RUN yarn plugin import workspace-tools
-RUN yarn workspaces focus --production && yarn rebuild"",
-          "export DOCKER_COPY_WORKSPACE_FILES="COPY --chown=node:node api/package.json /app/api/package.json
-COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
-COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
-COPY --chown=node:node .yarn /app/.yarn"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "ensureNodeDockerfile",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
-          "gcloud auth configure-docker asia-east1-docker.pkg.dev",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
-          "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile $DOCKER_BUILD_CONTEXT --build-arg BUILDKIT_INLINE_CACHE=1",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
-          "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
-          "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
-          "docker push $DOCKER_CACHE_IMAGE",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
-        ],
-        "services": [
-          {
-            "command": [
-              "--tls=false",
-            ],
-            "name": "docker:24.0.6-dind",
-          },
-        ],
-        "stage": "build",
-        "variables": {
-          "DOCKER_BUILDKIT": "1",
-          "DOCKER_DRIVER": "overlay2",
-          "DOCKER_HOST": "tcp://0.0.0.0:2375",
-          "DOCKER_TLS_CERTDIR": "",
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "2Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🚀 Deploy | review ": {
-        "allow_failure": false,
-        "artifacts": {
-          "reports": {
-            "dotenv": "gitlab_environment.env",
-          },
-        },
-        "environment": {
-          "auto_stop_in": "1 week",
-          "name": "review/$CI_COMMIT_REF_NAME/api",
-          "on_stop": "api 🛑 Stop ⚠️ | review ",
-          "url": "$CL_GITLAB_ENVIRONMENT_URL",
-        },
-        "image": "path/to/docker/gcloud:the-version",
-        "interruptible": true,
-        "needs": [
-          {
-            "artifacts": false,
-            "job": "api 👮 lint",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🔨 app | review ",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🔨 docker | review ",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🧪 test",
-          },
-          {
-            "artifacts": true,
-            "job": "api 🧾 sbom | review ",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🛡 audit",
-          },
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "when": "on_success",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="review"",
-          "export APP_DIR="api"",
-          "export ENV_TYPE="review"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL="https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_INTERNAL="$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_CANONICAL="$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL_INTERNAL="https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export DEPLOY_CLOUD_RUN_PROJECT_ID="asdf"",
-          "export DEPLOY_CLOUD_RUN_REGION="asia-east1"",
-          "export GCLOUD_DEPLOY_credentialsKey="$CL_review_api_GCLOUD_DEPLOY_credentialsKey"",
-          "export GCLOUD_RUN_canonicalHostSuffix="$CL_review_api_GCLOUD_RUN_canonicalHostSuffix"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"DEPLOY_CLOUD_RUN_PROJECT_ID\\",\\"DEPLOY_CLOUD_RUN_REGION\\",\\"GCLOUD_DEPLOY_credentialsKey\\",\\"GCLOUD_RUN_canonicalHostSuffix\\"]"",
-          "export DOCKER_REGISTRY="asia-east1-docker.pkg.dev"",
-          "export DOCKER_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })"",
-          "export DOCKER_CACHE_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api"",
-          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
-          "export CLOUDSDK_CORE_DISABLE_PROMPTS="1"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
-          "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe asdf --format="value(projectNumber)")",
-          "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):writeenvvars[collapsed=true]\\r\\e[0KWrite env vars to file"",
-          "cat > ____envvars.yaml <<EOF
-ENV_SHORT: |-
-  review
-APP_DIR: |-
-  api
-ENV_TYPE: |-
-  review
-BUILD_INFO_BUILD_ID: |-
-$(printf %s "$(git describe --tags 2>/dev/null || git rev-parse HEAD)" | sed 's/^/  /')
-BUILD_INFO_BUILD_TIME: |-
-$(printf %s "$CI_JOB_STARTED_AT" | sed 's/^/  /')
-BUILD_INFO_CURRENT_VERSION: |-
-$(printf %s "$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")" | sed 's/^/  /')
-HOST: |-
-$(printf %s "$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-ROOT_URL: |-
-$(printf %s "https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-HOST_INTERNAL: |-
-$(printf %s "$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-HOST_CANONICAL: |-
-$(printf %s "$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-ROOT_URL_INTERNAL: |-
-$(printf %s "https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-DEPLOY_CLOUD_RUN_PROJECT_ID: |-
-  asdf
-DEPLOY_CLOUD_RUN_REGION: |-
-  asia-east1
-GCLOUD_RUN_canonicalHostSuffix: |-
-$(printf %s "$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | sed 's/^/  /')
-_ALL_ENV_VAR_KEYS: |-
-  ["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_BUILD_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_INTERNAL","HOST_CANONICAL","ROOT_URL_INTERNAL","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]
-
-EOF
-",
-          "echo -e "\\e[0Ksection_end:$(date +%s):writeenvvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
-          "gcloud run deploy $(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api" | awk '{print tolower($0)}') --command="yarn,start" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; }):$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=review,env-name=review,build-type=node,cloud-run-service-name=$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api" | awk '{print tolower($0)}') --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
-          "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
-          "gcloud run revisions list --project=asdf --region=asia-east1 --service=$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api" | awk '{print tolower($0)}') --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=asdf --region=asia-east1 --quiet $revisionname ; done",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; }) --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })@$version --quiet --delete-tags; done",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
-          "set +e",
-          "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api --quiet --delete-tags",
-          "set -e",
-          "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
-          "echo 'Uploading SBOM to Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" "__sbom.json" vex.json || true",
-          "echo "CL_GITLAB_ENVIRONMENT_URL=https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" >> gitlab_environment.env",
-        ],
-        "stage": "deploy review",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "api 🛑 Stop ⚠️ | review ": {
-        "allow_failure": true,
-        "artifacts": {
-          "reports": {
-            "dotenv": "gitlab_environment.env",
-          },
-        },
-        "environment": {
-          "action": "stop",
-          "name": "review/$CI_COMMIT_REF_NAME/api",
-          "url": "$CL_GITLAB_ENVIRONMENT_URL",
-        },
-        "image": "path/to/docker/gcloud:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
-            "when": "on_success",
-          },
-          {
-            "when": "manual",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export CLOUDSDK_CORE_DISABLE_PROMPTS="1"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "set +e",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_review_api_GCLOUD_DEPLOY_credentialsKey")",
-          "gcloud run services delete $(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api" | awk '{print tolower($0)}') --project=asdf --region=asia-east1",
-          "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api/$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; }) --quiet --delete-tags",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
-          "set +e",
-          "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/review/api --quiet --delete-tags",
-          "set -e",
-          "echo 'Disabling component in Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" || true",
-          "set -e",
-          "echo "CL_GITLAB_ENVIRONMENT_URL=https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" >> gitlab_environment.env",
-        ],
-        "stage": "stop review",
-        "variables": {
-          "GIT_STRATEGY": "none",
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "api 🛡 audit": {
-        "allow_failure": true,
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="api"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "cd api",
-          "yarn npm audit --environment production",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🧪 test": {
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-node-modules",
-            "paths": [
-              "api/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-testing-chrome:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="api"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd api",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn test",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🧾 sbom | review ": {
-        "allow_failure": true,
-        "artifacts": {
-          "paths": [
-            "__sbom.json",
-          ],
-        },
-        "image": "aquasec/trivy:0.38.3",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
-        ],
-        "stage": "build",
-        "variables": {},
-      },
-      "app 👮 lint": {
-        "cache": [
-          {
-            "key": "app-yarn",
-            "paths": [
-              "app/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-node-modules",
-            "paths": [
-              "app/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="app"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd app",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn lint",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🔨 app | review ": {
-        "artifacts": {
-          "exclude": [
-            "app/.env",
-          ],
-          "expire_in": "1 day",
-          "paths": [
-            "app/__build_info.json",
-            "app/.next",
-            "app/dist",
-          ],
-          "reports": {
-            "junit": undefined,
-          },
-          "when": "always",
-        },
-        "cache": [
-          {
-            "key": {
-              "files": [
-                "app/Gemfile.lock",
-              ],
-            },
-            "paths": [
-              "app/vendor",
-            ],
-          },
-          {
-            "key": "app-yarn",
-            "paths": [
-              "app/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-node-modules",
-            "paths": [
-              "app/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-next-cache",
-            "paths": [
-              "app/.next/cache",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="review"",
-          "export APP_DIR="app"",
-          "export ENV_TYPE="review"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="unknown-host.example.com"",
-          "export ROOT_URL="https://unknown-host.example.com"",
-          "export HOST_INTERNAL="unknown-host.example.com"",
-          "export HOST_CANONICAL="unknown-host.example.com"",
-          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
-          "export APP_STORE_CONNECT_API_KEY_CONTENT="$CL_review_app_APP_STORE_CONNECT_API_KEY_CONTENT"",
-          "export APP_STORE_CONNECT_ISSUER_ID="$CL_review_app_APP_STORE_CONNECT_ISSUER_ID"",
-          "export APP_STORE_CONNECT_API_KEY_ID="$CL_review_app_APP_STORE_CONNECT_API_KEY_ID"",
-          "export GRAPHQL_URL="https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"APP_STORE_CONNECT_API_KEY_CONTENT\\",\\"APP_STORE_CONNECT_ISSUER_ID\\",\\"APP_STORE_CONNECT_API_KEY_ID\\",\\"GRAPHQL_URL\\"]"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):write-dotenv-app[collapsed=true]\\r\\e[0Kwrite dot env"",
-          "cat <<EOF > app/.env
-ENV_SHORT=review
-APP_DIR=app
-ENV_TYPE=review
-HOST=unknown-host.example.com
-ROOT_URL=https://unknown-host.example.com
-HOST_INTERNAL=unknown-host.example.com
-HOST_CANONICAL=unknown-host.example.com
-ROOT_URL_INTERNAL=https://unknown-host.example.com
-APP_STORE_CONNECT_API_KEY_CONTENT=$CL_review_app_APP_STORE_CONNECT_API_KEY_CONTENT
-APP_STORE_CONNECT_ISSUER_ID=$CL_review_app_APP_STORE_CONNECT_ISSUER_ID
-APP_STORE_CONNECT_API_KEY_ID=$CL_review_app_APP_STORE_CONNECT_API_KEY_ID
-GRAPHQL_URL=https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql
-_ALL_ENV_VAR_KEYS=["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_BUILD_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_INTERNAL","HOST_CANONICAL","ROOT_URL_INTERNAL","APP_STORE_CONNECT_API_KEY_CONTENT","APP_STORE_CONNECT_ISSUER_ID","APP_STORE_CONNECT_API_KEY_ID","GRAPHQL_URL"]
-EOF",
-          "echo -e "\\e[0Ksection_end:$(date +%s):write-dotenv-app\\r\\e[0K"",
-          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > app/__build_info.json",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd app",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "bundle config set --local path 'vendor/ruby'",
-          "gem install bundler",
-          "bundle install",
-          "bundle exec pod install --project-directory=ios",
-          "bundle exec fastlane build",
-        ],
-        "stage": "build",
-        "tags": [
-          "mac-runner",
-        ],
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🚀 Deploy | review ": {
-        "allow_failure": false,
-        "cache": [
-          {
-            "key": {
-              "files": [
-                "app/Gemfile.lock",
-              ],
-            },
-            "paths": [
-              "app/vendor",
-            ],
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [
-          {
-            "artifacts": false,
-            "job": "app 👮 lint",
-          },
-          {
-            "artifacts": true,
-            "job": "app 🔨 app | review ",
-          },
-          {
-            "artifacts": false,
-            "job": "app 🧪 test",
-          },
-          {
-            "artifacts": true,
-            "job": "app 🧾 sbom | review ",
-          },
-          {
-            "artifacts": false,
-            "job": "app 🛡 audit",
-          },
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "when": "on_success",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="review"",
-          "export APP_DIR="app"",
-          "export ENV_TYPE="review"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="unknown-host.example.com"",
-          "export ROOT_URL="https://unknown-host.example.com"",
-          "export HOST_INTERNAL="unknown-host.example.com"",
-          "export HOST_CANONICAL="unknown-host.example.com"",
-          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
-          "export APP_STORE_CONNECT_API_KEY_CONTENT="$CL_review_app_APP_STORE_CONNECT_API_KEY_CONTENT"",
-          "export APP_STORE_CONNECT_ISSUER_ID="$CL_review_app_APP_STORE_CONNECT_ISSUER_ID"",
-          "export APP_STORE_CONNECT_API_KEY_ID="$CL_review_app_APP_STORE_CONNECT_API_KEY_ID"",
-          "export GRAPHQL_URL="https://$(printf %s "pan-test-app-review-$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })-api-$CL_review_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"APP_STORE_CONNECT_API_KEY_CONTENT\\",\\"APP_STORE_CONNECT_ISSUER_ID\\",\\"APP_STORE_CONNECT_API_KEY_ID\\",\\"GRAPHQL_URL\\"]"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "cd app",
-          "bundle config set --local path 'vendor/ruby'",
-          "gem install bundler",
-          "bundle install",
-          "bundle exec fastlane deploy_test",
-          "echo 'Uploading SBOM to Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://unknown-host.example.com" "__sbom.json" vex.json || true",
-        ],
-        "stage": "deploy review",
-        "tags": [
-          "mac-runner",
-        ],
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "app 🛡 audit": {
-        "allow_failure": true,
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="app"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "cd app",
-          "yarn npm audit --environment production",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🧪 test": {
-        "cache": [
-          {
-            "key": "app-yarn",
-            "paths": [
-              "app/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-node-modules",
-            "paths": [
-              "app/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-testing-chrome:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_PATH="app"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd app",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn test",
-        ],
-        "stage": "test",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🧾 sbom | review ": {
-        "allow_failure": true,
-        "artifacts": {
-          "paths": [
-            "__sbom.json",
-          ],
-        },
-        "image": "aquasec/trivy:0.38.3",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
-        ],
-        "stage": "build",
-        "variables": {},
-      },
-    },
-    "stages": [
-      "setup",
-      "setup dev",
-      "setup review",
-      "setup stage",
-      "setup prod",
-      "test",
-      "test dev",
-      "test review",
-      "test stage",
-      "test prod",
-      "build",
-      "build dev",
-      "build review",
-      "build stage",
-      "build prod",
-      "deploy",
-      "deploy dev",
-      "deploy review",
-      "deploy stage",
-      "deploy prod",
-      "verify",
-      "verify dev",
-      "verify review",
-      "verify stage",
-      "verify prod",
-      "rollback",
-      "rollback dev",
-      "rollback review",
-      "rollback stage",
-      "rollback prod",
-      "stop",
-      "stop dev",
-      "stop review",
-      "stop stage",
-      "stop prod",
-    ],
-    "variables": {
-      "ARTIFACT_COMPRESSION_LEVEL": "fast",
-      "CACHE_COMPRESSION_LEVEL": "fast",
-      "FF_USE_FASTZIP": "true",
-      "GIT_DEPTH": "1",
-      "TRANSFER_METER_FREQUENCY": "5s",
-    },
-    "workflow": {
-      "rules": [
-        {
-          "if": "$CI_COMMIT_TAG",
-        },
-        {
-          "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
-          "when": "never",
-        },
-        {
-          "if": "$CI_PIPELINE_SOURCE  == "schedule"",
-          "when": "never",
-        },
-        {
-          "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
-        },
-        {
-          "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
-        },
-        {
-          "if": "$CI_MERGE_REQUEST_ID",
-        },
-      ],
-    },
-  },
-  "taggedRelease": {
-    "image": "path/to/docker/jobs-default:the-version",
-    "jobs": {
-      "api 🔨 app | prod ": {
-        "artifacts": {
-          "expire_in": "1 day",
-          "paths": [
-            "api/__build_info.json",
-            "api/.next",
-            "api/dist",
-          ],
-          "reports": {
-            "junit": undefined,
-          },
-          "when": "always",
-        },
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-node-modules",
-            "paths": [
-              "api/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-next-cache",
-            "paths": [
-              "api/.next/cache",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="prod"",
-          "export APP_DIR="api"",
-          "export ENV_TYPE="prod"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL="https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_INTERNAL="$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_CANONICAL="$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL_INTERNAL="https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export DEPLOY_CLOUD_RUN_PROJECT_ID="asdf"",
-          "export DEPLOY_CLOUD_RUN_REGION="asia-east1"",
-          "export GCLOUD_DEPLOY_credentialsKey="$CL_prod_api_GCLOUD_DEPLOY_credentialsKey"",
-          "export GCLOUD_RUN_canonicalHostSuffix="$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"DEPLOY_CLOUD_RUN_PROJECT_ID\\",\\"DEPLOY_CLOUD_RUN_REGION\\",\\"GCLOUD_DEPLOY_credentialsKey\\",\\"GCLOUD_RUN_canonicalHostSuffix\\"]"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > api/__build_info.json",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd api",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn build",
-        ],
-        "stage": "build",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🔨 app | stage ": {
-        "artifacts": {
-          "expire_in": "1 day",
-          "paths": [
-            "api/__build_info.json",
-            "api/.next",
-            "api/dist",
-          ],
-          "reports": {
-            "junit": undefined,
-          },
-          "when": "always",
-        },
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-node-modules",
-            "paths": [
-              "api/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "api-next-cache",
-            "paths": [
-              "api/.next/cache",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="stage"",
-          "export APP_DIR="api"",
-          "export ENV_TYPE="stage"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL="https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_INTERNAL="$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_CANONICAL="$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL_INTERNAL="https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export DEPLOY_CLOUD_RUN_PROJECT_ID="asdf"",
-          "export DEPLOY_CLOUD_RUN_REGION="asia-east1"",
-          "export GCLOUD_DEPLOY_credentialsKey="$CL_stage_api_GCLOUD_DEPLOY_credentialsKey"",
-          "export GCLOUD_RUN_canonicalHostSuffix="$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"DEPLOY_CLOUD_RUN_PROJECT_ID\\",\\"DEPLOY_CLOUD_RUN_REGION\\",\\"GCLOUD_DEPLOY_credentialsKey\\",\\"GCLOUD_RUN_canonicalHostSuffix\\"]"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > api/__build_info.json",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd api",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "yarn build",
-        ],
-        "stage": "build",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🔨 docker | prod ": {
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull",
-          },
-        ],
-        "image": "path/to/docker/docker-build:the-version",
-        "interruptible": true,
-        "needs": [
-          "api 🔨 app | prod ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_DIR="api"",
-          "export DOCKER_BUILD_CONTEXT="."",
-          "export DOCKER_REGISTRY="asia-east1-docker.pkg.dev"",
-          "export DOCKER_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api"",
-          "export DOCKER_CACHE_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api"",
-          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
-          "export DOCKER_COPY_AND_INSTALL_APP="COPY --chown=node:node $APP_DIR .
-RUN yarn plugin import workspace-tools
-RUN yarn workspaces focus --production && yarn rebuild"",
-          "export DOCKER_COPY_WORKSPACE_FILES="COPY --chown=node:node api/package.json /app/api/package.json
-COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
-COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
-COPY --chown=node:node .yarn /app/.yarn"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "ensureNodeDockerfile",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
-          "gcloud auth configure-docker asia-east1-docker.pkg.dev",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
-          "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile $DOCKER_BUILD_CONTEXT --build-arg BUILDKIT_INLINE_CACHE=1",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
-          "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
-          "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
-          "docker push $DOCKER_CACHE_IMAGE",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
-        ],
-        "services": [
-          {
-            "command": [
-              "--tls=false",
-            ],
-            "name": "docker:24.0.6-dind",
-          },
-        ],
-        "stage": "build",
-        "variables": {
-          "DOCKER_BUILDKIT": "1",
-          "DOCKER_DRIVER": "overlay2",
-          "DOCKER_HOST": "tcp://0.0.0.0:2375",
-          "DOCKER_TLS_CERTDIR": "",
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "2Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🔨 docker | stage ": {
-        "cache": [
-          {
-            "key": "api-yarn",
-            "paths": [
-              "api/.yarn",
-            ],
-            "policy": "pull",
-          },
-        ],
-        "image": "path/to/docker/docker-build:the-version",
-        "interruptible": true,
-        "needs": [
-          "api 🔨 app | stage ",
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export APP_DIR="api"",
-          "export DOCKER_BUILD_CONTEXT="."",
-          "export DOCKER_REGISTRY="asia-east1-docker.pkg.dev"",
-          "export DOCKER_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api"",
-          "export DOCKER_CACHE_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api"",
-          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
-          "export DOCKER_COPY_AND_INSTALL_APP="COPY --chown=node:node $APP_DIR .
-RUN yarn plugin import workspace-tools
-RUN yarn workspaces focus --production && yarn rebuild"",
-          "export DOCKER_COPY_WORKSPACE_FILES="COPY --chown=node:node api/package.json /app/api/package.json
-COPY --chown=node:node api/yarn.lock /app/api/yarn.lock
-COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
-COPY --chown=node:node .yarn /app/.yarn"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "ensureNodeDockerfile",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
-          "gcloud auth configure-docker asia-east1-docker.pkg.dev",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-login\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-build[collapsed=true]\\r\\e[0KDocker build"",
-          "docker build --network host --cache-from $DOCKER_CACHE_IMAGE --tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG -f $APP_DIR/Dockerfile $DOCKER_BUILD_CONTEXT --build-arg BUILDKIT_INLINE_CACHE=1",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-build\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):docker-push[collapsed=true]\\r\\e[0KDocker push and tag"",
-          "docker push $DOCKER_IMAGE:$DOCKER_IMAGE_TAG",
-          "docker tag $DOCKER_IMAGE:$DOCKER_IMAGE_TAG $DOCKER_CACHE_IMAGE",
-          "docker push $DOCKER_CACHE_IMAGE",
-          "echo -e "\\e[0Ksection_end:$(date +%s):docker-push\\r\\e[0K"",
-        ],
-        "services": [
-          {
-            "command": [
-              "--tls=false",
-            ],
-            "name": "docker:24.0.6-dind",
-          },
-        ],
-        "stage": "build",
-        "variables": {
-          "DOCKER_BUILDKIT": "1",
-          "DOCKER_DRIVER": "overlay2",
-          "DOCKER_HOST": "tcp://0.0.0.0:2375",
-          "DOCKER_TLS_CERTDIR": "",
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "2Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "api 🚀 Deploy | prod ": {
-        "allow_failure": true,
-        "artifacts": {
-          "reports": {
-            "dotenv": "gitlab_environment.env",
-          },
-        },
-        "environment": {
-          "auto_stop_in": undefined,
-          "name": "prod/api",
-          "on_stop": "api 🛑 Stop ⚠️ | prod ",
-          "url": "$CL_GITLAB_ENVIRONMENT_URL",
-        },
-        "image": "path/to/docker/gcloud:the-version",
-        "interruptible": true,
-        "needs": [
-          {
-            "artifacts": false,
-            "job": "api 🔨 app | prod ",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🔨 docker | prod ",
-          },
-          {
-            "artifacts": true,
-            "job": "api 🧾 sbom | prod ",
-          },
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "when": "manual",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="prod"",
-          "export APP_DIR="api"",
-          "export ENV_TYPE="prod"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL="https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_INTERNAL="$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_CANONICAL="$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL_INTERNAL="https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export DEPLOY_CLOUD_RUN_PROJECT_ID="asdf"",
-          "export DEPLOY_CLOUD_RUN_REGION="asia-east1"",
-          "export GCLOUD_DEPLOY_credentialsKey="$CL_prod_api_GCLOUD_DEPLOY_credentialsKey"",
-          "export GCLOUD_RUN_canonicalHostSuffix="$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"DEPLOY_CLOUD_RUN_PROJECT_ID\\",\\"DEPLOY_CLOUD_RUN_REGION\\",\\"GCLOUD_DEPLOY_credentialsKey\\",\\"GCLOUD_RUN_canonicalHostSuffix\\"]"",
-          "export DOCKER_REGISTRY="asia-east1-docker.pkg.dev"",
-          "export DOCKER_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api"",
-          "export DOCKER_CACHE_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api"",
-          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
-          "export CLOUDSDK_CORE_DISABLE_PROMPTS="1"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
-          "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe asdf --format="value(projectNumber)")",
-          "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):writeenvvars[collapsed=true]\\r\\e[0KWrite env vars to file"",
-          "cat > ____envvars.yaml <<EOF
-ENV_SHORT: |-
-  prod
-APP_DIR: |-
-  api
-ENV_TYPE: |-
-  prod
-BUILD_INFO_BUILD_ID: |-
-$(printf %s "$(git describe --tags 2>/dev/null || git rev-parse HEAD)" | sed 's/^/  /')
-BUILD_INFO_BUILD_TIME: |-
-$(printf %s "$CI_JOB_STARTED_AT" | sed 's/^/  /')
-BUILD_INFO_CURRENT_VERSION: |-
-$(printf %s "$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")" | sed 's/^/  /')
-HOST: |-
-$(printf %s "$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-ROOT_URL: |-
-$(printf %s "https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-HOST_INTERNAL: |-
-$(printf %s "$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-HOST_CANONICAL: |-
-$(printf %s "$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-ROOT_URL_INTERNAL: |-
-$(printf %s "https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-DEPLOY_CLOUD_RUN_PROJECT_ID: |-
-  asdf
-DEPLOY_CLOUD_RUN_REGION: |-
-  asia-east1
-GCLOUD_RUN_canonicalHostSuffix: |-
-$(printf %s "$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | sed 's/^/  /')
-_ALL_ENV_VAR_KEYS: |-
-  ["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_BUILD_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_INTERNAL","HOST_CANONICAL","ROOT_URL_INTERNAL","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]
-
-EOF
-",
-          "echo -e "\\e[0Ksection_end:$(date +%s):writeenvvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
-          "gcloud run deploy pan-test-app-prod-api --command="yarn,start" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=prod,env-name=prod,build-type=node,cloud-run-service-name=pan-test-app-prod-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
-          "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
-          "gcloud run revisions list --project=asdf --region=asia-east1 --service=pan-test-app-prod-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | tail -n +6 | while read -r revisionname; do gcloud run revisions delete --project=asdf --region=asia-east1 --quiet $revisionname ; done",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +7 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api@$version --quiet --delete-tags; done",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
-          "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
-          "echo 'Uploading SBOM to Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" "__sbom.json" vex.json || true",
-          "echo "CL_GITLAB_ENVIRONMENT_URL=https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" >> gitlab_environment.env",
-        ],
-        "stage": "deploy prod",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "api 🚀 Deploy | stage ": {
-        "allow_failure": false,
-        "artifacts": {
-          "reports": {
-            "dotenv": "gitlab_environment.env",
-          },
-        },
-        "environment": {
-          "auto_stop_in": undefined,
-          "name": "stage/api",
-          "on_stop": "api 🛑 Stop ⚠️ | stage ",
-          "url": "$CL_GITLAB_ENVIRONMENT_URL",
-        },
-        "image": "path/to/docker/gcloud:the-version",
-        "interruptible": true,
-        "needs": [
-          {
-            "artifacts": false,
-            "job": "api 🔨 app | stage ",
-          },
-          {
-            "artifacts": false,
-            "job": "api 🔨 docker | stage ",
-          },
-          {
-            "artifacts": true,
-            "job": "api 🧾 sbom | stage ",
-          },
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "when": "on_success",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="stage"",
-          "export APP_DIR="api"",
-          "export ENV_TYPE="stage"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL="https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_INTERNAL="$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export HOST_CANONICAL="$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export ROOT_URL_INTERNAL="https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')"",
-          "export DEPLOY_CLOUD_RUN_PROJECT_ID="asdf"",
-          "export DEPLOY_CLOUD_RUN_REGION="asia-east1"",
-          "export GCLOUD_DEPLOY_credentialsKey="$CL_stage_api_GCLOUD_DEPLOY_credentialsKey"",
-          "export GCLOUD_RUN_canonicalHostSuffix="$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"DEPLOY_CLOUD_RUN_PROJECT_ID\\",\\"DEPLOY_CLOUD_RUN_REGION\\",\\"GCLOUD_DEPLOY_credentialsKey\\",\\"GCLOUD_RUN_canonicalHostSuffix\\"]"",
-          "export DOCKER_REGISTRY="asia-east1-docker.pkg.dev"",
-          "export DOCKER_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api"",
-          "export DOCKER_CACHE_IMAGE="asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api"",
-          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
-          "export CLOUDSDK_CORE_DISABLE_PROMPTS="1"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):prepare[collapsed=true]\\r\\e[0KPrepare..."",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
-          "export GCLOUD_PROJECT_NUMBER=$(gcloud projects describe asdf --format="value(projectNumber)")",
-          "echo "GCLOUD_PROJECT_NUMBER: $GCLOUD_PROJECT_NUMBER"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):prepare\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):writeenvvars[collapsed=true]\\r\\e[0KWrite env vars to file"",
-          "cat > ____envvars.yaml <<EOF
-ENV_SHORT: |-
-  stage
-APP_DIR: |-
-  api
-ENV_TYPE: |-
-  stage
-BUILD_INFO_BUILD_ID: |-
-$(printf %s "$(git describe --tags 2>/dev/null || git rev-parse HEAD)" | sed 's/^/  /')
-BUILD_INFO_BUILD_TIME: |-
-$(printf %s "$CI_JOB_STARTED_AT" | sed 's/^/  /')
-BUILD_INFO_CURRENT_VERSION: |-
-$(printf %s "$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")" | sed 's/^/  /')
-HOST: |-
-$(printf %s "$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-ROOT_URL: |-
-$(printf %s "https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-HOST_INTERNAL: |-
-$(printf %s "$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-HOST_CANONICAL: |-
-$(printf %s "$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-ROOT_URL_INTERNAL: |-
-$(printf %s "https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" | sed 's/^/  /')
-DEPLOY_CLOUD_RUN_PROJECT_ID: |-
-  asdf
-DEPLOY_CLOUD_RUN_REGION: |-
-  asia-east1
-GCLOUD_RUN_canonicalHostSuffix: |-
-$(printf %s "$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | sed 's/^/  /')
-_ALL_ENV_VAR_KEYS: |-
-  ["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_BUILD_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_INTERNAL","HOST_CANONICAL","ROOT_URL_INTERNAL","DEPLOY_CLOUD_RUN_PROJECT_ID","DEPLOY_CLOUD_RUN_REGION","GCLOUD_DEPLOY_credentialsKey","GCLOUD_RUN_canonicalHostSuffix"]
-
-EOF
-",
-          "echo -e "\\e[0Ksection_end:$(date +%s):writeenvvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):deploy[collapsed=true]\\r\\e[0KDeploy to cloud run"",
-          "gcloud run deploy pan-test-app-stage-api --command="yarn,start" --image=asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api:$DOCKER_IMAGE_TAG --project=asdf --region=asia-east1 --labels=customer-name=pan,component-name=api,app-name=test-app,env-type=stage,env-name=stage,build-type=node,cloud-run-service-name=pan-test-app-stage-api --env-vars-file=____envvars.yaml --min-instances=0 --max-instances=100 --cpu-throttling --allow-unauthenticated --ingress=all --cpu-boost",
-          "echo -e "\\e[0Ksection_end:$(date +%s):deploy\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):cleanup[collapsed=true]\\r\\e[0KCleanup"",
-          "gcloud run revisions list --project=asdf --region=asia-east1 --service=pan-test-app-stage-api --limit=unlimited --sort-by=metadata.creationTimestamp --format="value(name)" --filter='(status.conditions.status=False OR status.conditions.status=Unknown)' | while read -r revisionname; do gcloud run revisions delete --project=asdf --region=asia-east1 --quiet $revisionname ; done",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api@$version --quiet --delete-tags; done",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
-          "echo -e "\\e[0Ksection_end:$(date +%s):cleanup\\r\\e[0K"",
-          "echo 'Uploading SBOM to Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/api" "https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" "__sbom.json" vex.json || true",
-          "echo "CL_GITLAB_ENVIRONMENT_URL=https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" >> gitlab_environment.env",
-        ],
-        "stage": "deploy stage",
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "api 🛑 Stop ⚠️ | prod ": {
-        "allow_failure": true,
-        "artifacts": {
-          "reports": {
-            "dotenv": "gitlab_environment.env",
-          },
-        },
-        "environment": {
-          "action": "stop",
-          "name": "prod/api",
-          "url": "$CL_GITLAB_ENVIRONMENT_URL",
-        },
-        "image": "path/to/docker/gcloud:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
-            "when": "on_success",
-          },
-          {
-            "when": "manual",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export CLOUDSDK_CORE_DISABLE_PROMPTS="1"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "set +e",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_prod_api_GCLOUD_DEPLOY_credentialsKey")",
-          "gcloud run services delete pan-test-app-prod-api --project=asdf --region=asia-east1",
-          "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/prod/api --quiet --delete-tags",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
-          "echo 'Disabling component in Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" || true",
-          "set -e",
-          "echo "CL_GITLAB_ENVIRONMENT_URL=https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" >> gitlab_environment.env",
-        ],
-        "stage": "stop prod",
-        "variables": {
-          "GIT_STRATEGY": "none",
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "api 🛑 Stop ⚠️ | stage ": {
-        "allow_failure": true,
-        "artifacts": {
-          "reports": {
-            "dotenv": "gitlab_environment.env",
-          },
-        },
-        "environment": {
-          "action": "stop",
-          "name": "stage/api",
-          "url": "$CL_GITLAB_ENVIRONMENT_URL",
-        },
-        "image": "path/to/docker/gcloud:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
-            "when": "on_success",
-          },
-          {
-            "when": "manual",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export CLOUDSDK_CORE_DISABLE_PROMPTS="1"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "set +e",
-          "gcloud auth activate-service-account --key-file=<(echo "$CL_stage_api_GCLOUD_DEPLOY_credentialsKey")",
-          "gcloud run services delete pan-test-app-stage-api --project=asdf --region=asia-east1",
-          "gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/stage/api --quiet --delete-tags",
-          "gcloud artifacts docker images list asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api --sort-by=~CREATE_TIME --format="value(version)" | tail -n +2 | while read -r version; do gcloud artifacts docker images delete asia-east1-docker.pkg.dev/asdf/catladder-deploy/pan-test-app/caches/api@$version --quiet --delete-tags; done",
-          "echo 'Disabling component in Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/api" "https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" || true",
-          "set -e",
-          "echo "CL_GITLAB_ENVIRONMENT_URL=https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')" >> gitlab_environment.env",
-        ],
-        "stage": "stop stage",
-        "variables": {
-          "GIT_STRATEGY": "none",
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "api 🧾 sbom | prod ": {
-        "allow_failure": true,
-        "artifacts": {
-          "paths": [
-            "__sbom.json",
-          ],
-        },
-        "image": "aquasec/trivy:0.38.3",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
-        ],
-        "stage": "build",
-        "variables": {},
-      },
-      "api 🧾 sbom | stage ": {
-        "allow_failure": true,
-        "artifacts": {
-          "paths": [
-            "__sbom.json",
-          ],
-        },
-        "image": "aquasec/trivy:0.38.3",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "trivy fs --quiet --format cyclonedx --output "__sbom.json" api",
-        ],
-        "stage": "build",
-        "variables": {},
-      },
-      "app 🔨 app | prod ": {
-        "artifacts": {
-          "exclude": [
-            "app/.env",
-          ],
-          "expire_in": "1 day",
-          "paths": [
-            "app/__build_info.json",
-            "app/.next",
-            "app/dist",
-          ],
-          "reports": {
-            "junit": undefined,
-          },
-          "when": "always",
-        },
-        "cache": [
-          {
-            "key": {
-              "files": [
-                "app/Gemfile.lock",
-              ],
-            },
-            "paths": [
-              "app/vendor",
-            ],
-          },
-          {
-            "key": "app-yarn",
-            "paths": [
-              "app/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-node-modules",
-            "paths": [
-              "app/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-next-cache",
-            "paths": [
-              "app/.next/cache",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="prod"",
-          "export APP_DIR="app"",
-          "export ENV_TYPE="prod"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="unknown-host.example.com"",
-          "export ROOT_URL="https://unknown-host.example.com"",
-          "export HOST_INTERNAL="unknown-host.example.com"",
-          "export HOST_CANONICAL="unknown-host.example.com"",
-          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
-          "export APP_STORE_CONNECT_API_KEY_CONTENT="$CL_prod_app_APP_STORE_CONNECT_API_KEY_CONTENT"",
-          "export APP_STORE_CONNECT_ISSUER_ID="$CL_prod_app_APP_STORE_CONNECT_ISSUER_ID"",
-          "export APP_STORE_CONNECT_API_KEY_ID="$CL_prod_app_APP_STORE_CONNECT_API_KEY_ID"",
-          "export GRAPHQL_URL="https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"APP_STORE_CONNECT_API_KEY_CONTENT\\",\\"APP_STORE_CONNECT_ISSUER_ID\\",\\"APP_STORE_CONNECT_API_KEY_ID\\",\\"GRAPHQL_URL\\"]"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):write-dotenv-app[collapsed=true]\\r\\e[0Kwrite dot env"",
-          "cat <<EOF > app/.env
-ENV_SHORT=prod
-APP_DIR=app
-ENV_TYPE=prod
-HOST=unknown-host.example.com
-ROOT_URL=https://unknown-host.example.com
-HOST_INTERNAL=unknown-host.example.com
-HOST_CANONICAL=unknown-host.example.com
-ROOT_URL_INTERNAL=https://unknown-host.example.com
-APP_STORE_CONNECT_API_KEY_CONTENT=$CL_prod_app_APP_STORE_CONNECT_API_KEY_CONTENT
-APP_STORE_CONNECT_ISSUER_ID=$CL_prod_app_APP_STORE_CONNECT_ISSUER_ID
-APP_STORE_CONNECT_API_KEY_ID=$CL_prod_app_APP_STORE_CONNECT_API_KEY_ID
-GRAPHQL_URL=https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql
-_ALL_ENV_VAR_KEYS=["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_BUILD_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_INTERNAL","HOST_CANONICAL","ROOT_URL_INTERNAL","APP_STORE_CONNECT_API_KEY_CONTENT","APP_STORE_CONNECT_ISSUER_ID","APP_STORE_CONNECT_API_KEY_ID","GRAPHQL_URL"]
-EOF",
-          "echo -e "\\e[0Ksection_end:$(date +%s):write-dotenv-app\\r\\e[0K"",
-          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > app/__build_info.json",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd app",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "bundle config set --local path 'vendor/ruby'",
-          "gem install bundler",
-          "bundle install",
-          "bundle exec pod install --project-directory=ios",
-          "bundle exec fastlane build",
-        ],
-        "stage": "build",
-        "tags": [
-          "mac-runner",
-        ],
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🔨 app | stage ": {
-        "artifacts": {
-          "exclude": [
-            "app/.env",
-          ],
-          "expire_in": "1 day",
-          "paths": [
-            "app/__build_info.json",
-            "app/.next",
-            "app/dist",
-          ],
-          "reports": {
-            "junit": undefined,
-          },
-          "when": "always",
-        },
-        "cache": [
-          {
-            "key": {
-              "files": [
-                "app/Gemfile.lock",
-              ],
-            },
-            "paths": [
-              "app/vendor",
-            ],
-          },
-          {
-            "key": "app-yarn",
-            "paths": [
-              "app/.yarn",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-node-modules",
-            "paths": [
-              "app/node_modules",
-            ],
-            "policy": "pull-push",
-          },
-          {
-            "key": "app-next-cache",
-            "paths": [
-              "app/.next/cache",
-            ],
-            "policy": "pull-push",
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="stage"",
-          "export APP_DIR="app"",
-          "export ENV_TYPE="stage"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="unknown-host.example.com"",
-          "export ROOT_URL="https://unknown-host.example.com"",
-          "export HOST_INTERNAL="unknown-host.example.com"",
-          "export HOST_CANONICAL="unknown-host.example.com"",
-          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
-          "export APP_STORE_CONNECT_API_KEY_CONTENT="$CL_stage_app_APP_STORE_CONNECT_API_KEY_CONTENT"",
-          "export APP_STORE_CONNECT_ISSUER_ID="$CL_stage_app_APP_STORE_CONNECT_ISSUER_ID"",
-          "export APP_STORE_CONNECT_API_KEY_ID="$CL_stage_app_APP_STORE_CONNECT_API_KEY_ID"",
-          "export GRAPHQL_URL="https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"APP_STORE_CONNECT_API_KEY_CONTENT\\",\\"APP_STORE_CONNECT_ISSUER_ID\\",\\"APP_STORE_CONNECT_API_KEY_ID\\",\\"GRAPHQL_URL\\"]"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):write-dotenv-app[collapsed=true]\\r\\e[0Kwrite dot env"",
-          "cat <<EOF > app/.env
-ENV_SHORT=stage
-APP_DIR=app
-ENV_TYPE=stage
-HOST=unknown-host.example.com
-ROOT_URL=https://unknown-host.example.com
-HOST_INTERNAL=unknown-host.example.com
-HOST_CANONICAL=unknown-host.example.com
-ROOT_URL_INTERNAL=https://unknown-host.example.com
-APP_STORE_CONNECT_API_KEY_CONTENT=$CL_stage_app_APP_STORE_CONNECT_API_KEY_CONTENT
-APP_STORE_CONNECT_ISSUER_ID=$CL_stage_app_APP_STORE_CONNECT_ISSUER_ID
-APP_STORE_CONNECT_API_KEY_ID=$CL_stage_app_APP_STORE_CONNECT_API_KEY_ID
-GRAPHQL_URL=https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql
-_ALL_ENV_VAR_KEYS=["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_BUILD_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_INTERNAL","HOST_CANONICAL","ROOT_URL_INTERNAL","APP_STORE_CONNECT_API_KEY_CONTENT","APP_STORE_CONNECT_ISSUER_ID","APP_STORE_CONNECT_API_KEY_ID","GRAPHQL_URL"]
-EOF",
-          "echo -e "\\e[0Ksection_end:$(date +%s):write-dotenv-app\\r\\e[0K"",
-          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > app/__build_info.json",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "cd app",
-          "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
-          "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
-          "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
-          "echo -e "\\e[0Ksection_end:$(date +%s):nodeinstall\\r\\e[0K"",
-          "echo -e "\\e[0Ksection_start:$(date +%s):yarninstall[collapsed=true]\\r\\e[0KYarn install"",
-          "yarn install --immutable",
-          "echo -e "\\e[0Ksection_end:$(date +%s):yarninstall\\r\\e[0K"",
-          "bundle config set --local path 'vendor/ruby'",
-          "gem install bundler",
-          "bundle install",
-          "bundle exec pod install --project-directory=ios",
-          "bundle exec fastlane build",
-        ],
-        "stage": "build",
-        "tags": [
-          "mac-runner",
-        ],
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.45",
-          "KUBERNETES_MEMORY_LIMIT": "4Gi",
-          "KUBERNETES_MEMORY_REQUEST": "1Gi",
-        },
-      },
-      "app 🚀 Deploy | prod ": {
-        "allow_failure": true,
-        "cache": [
-          {
-            "key": {
-              "files": [
-                "app/Gemfile.lock",
-              ],
-            },
-            "paths": [
-              "app/vendor",
-            ],
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [
-          {
-            "artifacts": true,
-            "job": "app 🔨 app | prod ",
-          },
-          {
-            "artifacts": true,
-            "job": "app 🧾 sbom | prod ",
-          },
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "when": "manual",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="prod"",
-          "export APP_DIR="app"",
-          "export ENV_TYPE="prod"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="unknown-host.example.com"",
-          "export ROOT_URL="https://unknown-host.example.com"",
-          "export HOST_INTERNAL="unknown-host.example.com"",
-          "export HOST_CANONICAL="unknown-host.example.com"",
-          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
-          "export APP_STORE_CONNECT_API_KEY_CONTENT="$CL_prod_app_APP_STORE_CONNECT_API_KEY_CONTENT"",
-          "export APP_STORE_CONNECT_ISSUER_ID="$CL_prod_app_APP_STORE_CONNECT_ISSUER_ID"",
-          "export APP_STORE_CONNECT_API_KEY_ID="$CL_prod_app_APP_STORE_CONNECT_API_KEY_ID"",
-          "export GRAPHQL_URL="https://$(printf %s "pan-test-app-prod-api-$CL_prod_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"APP_STORE_CONNECT_API_KEY_CONTENT\\",\\"APP_STORE_CONNECT_ISSUER_ID\\",\\"APP_STORE_CONNECT_API_KEY_ID\\",\\"GRAPHQL_URL\\"]"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "cd app",
-          "bundle config set --local path 'vendor/ruby'",
-          "gem install bundler",
-          "bundle install",
-          "bundle exec fastlane deploy_test",
-          "echo 'Uploading SBOM to Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://unknown-host.example.com" "__sbom.json" vex.json || true",
-        ],
-        "stage": "deploy prod",
-        "tags": [
-          "mac-runner",
-        ],
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "app 🚀 Deploy | stage ": {
-        "allow_failure": false,
-        "cache": [
-          {
-            "key": {
-              "files": [
-                "app/Gemfile.lock",
-              ],
-            },
-            "paths": [
-              "app/vendor",
-            ],
-          },
-        ],
-        "image": "path/to/docker/jobs-default:the-version",
-        "interruptible": true,
-        "needs": [
-          {
-            "artifacts": true,
-            "job": "app 🔨 app | stage ",
-          },
-          {
-            "artifacts": true,
-            "job": "app 🧾 sbom | stage ",
-          },
-        ],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "rules": [
-          {
-            "when": "on_success",
-          },
-        ],
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "export ENV_SHORT="stage"",
-          "export APP_DIR="app"",
-          "export ENV_TYPE="stage"",
-          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
-          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
-          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\/v//'); [ -z "$tag" ] && echo "0.0.0" || echo "$tag")"",
-          "export HOST="unknown-host.example.com"",
-          "export ROOT_URL="https://unknown-host.example.com"",
-          "export HOST_INTERNAL="unknown-host.example.com"",
-          "export HOST_CANONICAL="unknown-host.example.com"",
-          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
-          "export APP_STORE_CONNECT_API_KEY_CONTENT="$CL_stage_app_APP_STORE_CONNECT_API_KEY_CONTENT"",
-          "export APP_STORE_CONNECT_ISSUER_ID="$CL_stage_app_APP_STORE_CONNECT_ISSUER_ID"",
-          "export APP_STORE_CONNECT_API_KEY_ID="$CL_stage_app_APP_STORE_CONNECT_API_KEY_ID"",
-          "export GRAPHQL_URL="https://$(printf %s "pan-test-app-stage-api-$CL_stage_api_GCLOUD_RUN_canonicalHostSuffix" | awk '{print tolower($0)}')/graphql"",
-          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\",\\"APP_STORE_CONNECT_API_KEY_CONTENT\\",\\"APP_STORE_CONNECT_ISSUER_ID\\",\\"APP_STORE_CONNECT_API_KEY_ID\\",\\"GRAPHQL_URL\\"]"",
-          "export LC_A="L=en_US.UTF-8"",
-          "export LANG="en_US.UTF-8"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "cd app",
-          "bundle config set --local path 'vendor/ruby'",
-          "gem install bundler",
-          "bundle install",
-          "bundle exec fastlane deploy_test",
-          "echo 'Uploading SBOM to Dependency Track'",
-          "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/app" "https://unknown-host.example.com" "__sbom.json" vex.json || true",
-        ],
-        "stage": "deploy stage",
-        "tags": [
-          "mac-runner",
-        ],
-        "variables": {
-          "KUBERNETES_CPU_REQUEST": "0.22",
-          "KUBERNETES_MEMORY_LIMIT": "400Mi",
-          "KUBERNETES_MEMORY_REQUEST": "200Mi",
-        },
-      },
-      "app 🧾 sbom | prod ": {
-        "allow_failure": true,
-        "artifacts": {
-          "paths": [
-            "__sbom.json",
-          ],
-        },
-        "image": "aquasec/trivy:0.38.3",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
-        ],
-        "stage": "build",
-        "variables": {},
-      },
-      "app 🧾 sbom | stage ": {
-        "allow_failure": true,
-        "artifacts": {
-          "paths": [
-            "__sbom.json",
-          ],
-        },
-        "image": "aquasec/trivy:0.38.3",
-        "interruptible": true,
-        "needs": [],
-        "retry": {
-          "max": 2,
-          "when": [
-            "runner_system_failure",
-            "stuck_or_timeout_failure",
-          ],
-        },
-        "script": [
-          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
-          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
-          "trivy fs --quiet --format cyclonedx --output "__sbom.json" app",
-        ],
-        "stage": "build",
-        "variables": {},
-      },
-    },
-    "stages": [
-      "setup",
-      "setup dev",
-      "setup review",
-      "setup stage",
-      "setup prod",
-      "test",
-      "test dev",
-      "test review",
-      "test stage",
-      "test prod",
-      "build",
-      "build dev",
-      "build review",
-      "build stage",
-      "build prod",
-      "deploy",
-      "deploy dev",
-      "deploy review",
-      "deploy stage",
-      "deploy prod",
-      "verify",
-      "verify dev",
-      "verify review",
-      "verify stage",
-      "verify prod",
-      "rollback",
-      "rollback dev",
-      "rollback review",
-      "rollback stage",
-      "rollback prod",
-      "stop",
-      "stop dev",
-      "stop review",
-      "stop stage",
-      "stop prod",
-    ],
-    "variables": {
-      "ARTIFACT_COMPRESSION_LEVEL": "fast",
-      "CACHE_COMPRESSION_LEVEL": "fast",
-      "FF_USE_FASTZIP": "true",
-      "GIT_DEPTH": "1",
-      "TRANSFER_METER_FREQUENCY": "5s",
-    },
-    "workflow": {
-      "rules": [
-        {
-          "if": "$CI_COMMIT_TAG",
-        },
-        {
-          "if": "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/",
-          "when": "never",
-        },
-        {
-          "if": "$CI_PIPELINE_SOURCE  == "schedule"",
-          "when": "never",
-        },
-        {
-          "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/",
-        },
-        {
-          "if": "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
-        },
-        {
-          "if": "$CI_MERGE_REQUEST_ID",
-        },
-      ],
-    },
-  },
-}
-`;