@davidvornholt/standards 0.26.4 → 0.28.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +36 -1
- package/package.json +6 -2
- package/src/cli.ts +127 -16
- package/src/creds-add-github.ts +12 -4
- package/src/creds-add.ts +14 -1
- package/src/creds-commands.ts +7 -1
- package/src/creds-github-apps.ts +71 -2
- package/src/creds-login-cloudflare.ts +6 -6
- package/src/creds-login-github.ts +6 -2
- package/src/creds-naming.ts +4 -1
- package/src/creds-plan-renew.ts +14 -2
- package/src/creds-plan-report.ts +1 -1
- package/src/creds-plan-unmanaged.ts +4 -5
- package/src/creds-plan.ts +1 -1
- package/src/creds-revoke-duplicate.ts +127 -0
- package/src/creds-revoke.ts +36 -15
- package/src/creds-store-lock-inspection.ts +26 -21
- package/src/creds-store-lock.ts +14 -1
- package/src/dependabot-directory-overlap.ts +100 -8
- package/src/dependabot-update.ts +11 -0
- package/src/dev-env-brokered-allowlist.ts +2 -2
- package/src/dev-env-brokered-preflight.ts +69 -0
- package/src/dev-env-brokered-preserve.ts +2 -1
- package/src/dev-env-brokered-refresh.ts +1 -1
- package/src/dev-env-brokered-resolve.ts +33 -22
- package/src/dev-env-brokered-source.ts +128 -0
- package/src/dev-env-brokered.ts +15 -2
- package/src/dev-env.ts +22 -0
- package/src/github-api.ts +5 -2
- package/src/github-apply.ts +26 -2
- package/src/github-bypass-actors.ts +3 -3
- package/src/github-ruleset-diff.ts +12 -19
- package/src/github-ruleset-visibility.ts +2 -4
- package/src/github-settings-parse.ts +86 -0
- package/src/sops-action-callers.ts +133 -0
- package/src/structure-check.ts +5 -1
package/src/structure-check.ts
CHANGED
|
@@ -4,6 +4,7 @@ import { isAbsolute, join } from 'node:path';
|
|
|
4
4
|
import { isContainedPath } from './contained-path';
|
|
5
5
|
import { isRecord } from './github-settings-parse';
|
|
6
6
|
import { readJsonFile } from './json-file';
|
|
7
|
+
import { collectSopsActionCallerProblems } from './sops-action-callers';
|
|
7
8
|
import { collectBunVersionProblems } from './structure-bun-version';
|
|
8
9
|
import {
|
|
9
10
|
missingPublishedCliProblems,
|
|
@@ -154,14 +155,16 @@ export const collectStructureProblems = async (
|
|
|
154
155
|
consumer: string,
|
|
155
156
|
profile: StructureProfile,
|
|
156
157
|
): Promise<ReadonlyArray<string>> => {
|
|
157
|
-
const [root, secretsProblems] = await Promise.all([
|
|
158
|
+
const [root, secretsProblems, callerProblems] = await Promise.all([
|
|
158
159
|
readJsonFile(join(consumer, 'package.json')),
|
|
159
160
|
collectCiSecretsProblems(consumer),
|
|
161
|
+
collectSopsActionCallerProblems(consumer),
|
|
160
162
|
]);
|
|
161
163
|
if (root === null) {
|
|
162
164
|
return [
|
|
163
165
|
'package.json must exist and contain a JSON object',
|
|
164
166
|
...secretsProblems,
|
|
167
|
+
...callerProblems,
|
|
165
168
|
];
|
|
166
169
|
}
|
|
167
170
|
const declaration = workspacePatternsOf(root);
|
|
@@ -193,5 +196,6 @@ export const collectStructureProblems = async (
|
|
|
193
196
|
...inspectRootScripts(root, profile, requireA11y),
|
|
194
197
|
...inspections.flatMap((i) => [...i.problems]),
|
|
195
198
|
...secretsProblems,
|
|
199
|
+
...callerProblems,
|
|
196
200
|
];
|
|
197
201
|
};
|