@docupace/pipeline 1.0.8-6.xray → 1.0.8

package/bitbucket-pipelines.yml

@@ -1,142 +0,0 @@
-# bitbucket-pipelines.yml
-export: true
-
-clone:
-  depth: 2
-
-
-definitions:
-  caches:
-    pnpm: ~/.pnpm-store
-  
-  scripts:
-    - &detect-and-prepare |
-        echo "Detecting project type..."
-        PROJECT_TYPE=""
-        
-        if [ -f "package.json" ]; then
-          if [ -f "pnpm-lock.yaml" ]; then
-            PROJECT_TYPE="--pnpm"
-          elif [ -f "package-lock.json" ]; then
-            PROJECT_TYPE="--npm"
-          elif [ -f "yarn.lock" ]; then
-            PROJECT_TYPE="--yarn"
-          else
-            PROJECT_TYPE="--npm"
-          fi
-        elif [ -f "build.gradle" ] || [ -f "build.gradle.kts" ] || [ -f "settings.gradle" ]; then
-          PROJECT_TYPE="--gradle"
-          echo "Detected: Gradle project"
-          if [ -f "./gradlew" ]; then
-            chmod +x ./gradlew
-            echo "Fixed gradlew permissions"
-          fi
-        else
-          echo "Error: Could not detect project type"
-          exit 1
-        fi
-        export PROJECT_TYPE
-
-  pipelines:
-    xray-scan:
-      - step:
-          name: JFrog Xray Security Scan
-          runs-on:
-            - self.hosted
-            - linux.shell
-            - onprem
-          caches:
-            - node
-            - pnpm
-            - gradle
-          script:
-            # Setup JFrog CLI
-            - curl -fL https://install-cli.jfrog.io | sh
-            - jf --version
-            - jf config remove scan1 || true
-            - jf config add scan1 --url=$JFROG_XRAY_URL --user=$JFROG_XRAY_USER --access-token=$JFROG_XRAY_PASSWORD
-            - jf c show
-            
-            # Detect and prepare project
-            - *detect-and-prepare
-            
-            # Create Slack notification script
-            - echo 'IyEvdXNyL2Jpbi9lbnYgYmFzaApHSVRfUEFUSD0kKGdpdCByZXYtcGFyc2UgLS1zaG93LXRvcGxldmVsKQpCQVNFTkFNRT0kKGJhc2VuYW1lICRHSVRfUEFUSCkKQkFTRU5BTUU9IiR7QklUQlVDS0VUX1JFUE9fU0xVR30iClNMQUNLX0FQST0iaHR0cHM6Ly9zbGFjay5jb20vYXBpL2NoYXQucG9zdE1lc3NhZ2UiCklOUFVUX1RBQkxFPSJ4cmF5LnR4dCIKSU5QVVRfSlNPTj0ieHJheS5qc29uIgoKIyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIyAx77iP4oOjIFBhcnNlIHRhYmxlIHRvIEpTT04gKGhhbmRsZSBtdWx0aS1saW5lIHdyYXBwaW5nKQojIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQoKYXdrICcKQkVHSU4gewogIHByaW50ICJbIgogIGZpcnN0ID0gMQogIGluX3Z1bG4gPSAwCn0KCiMgU2tpcCBzZXBhcmF0b3IgYW5kIGhlYWRlciBsaW5lcwovXlvilIzilJzilJRdLyB7IG5leHQgfQovQ1ZFLipTRVZFUklUWS4qRElSRUNULipERVBFTkRFTkNZLyB7IG5leHQgfQoKIyBQcm9jZXNzIGRhdGEgcm93cwovXuKUgi8gewogIGdzdWIoL17ilIIgLywgIiIpCiAgZ3N1YigvICrilIIgKiQvLCAiIikKICAKICBuID0gc3BsaXQoJDAsIGZpZWxkcywgLyAq4pSCICovKQogIAogICMgTmV3IHZ1bG5lcmFiaWxpdHkgKGhhcyBDVkUgaW4gZmlyc3QgY29sdW1uKQogIGlmIChuID49IDggJiYgZmllbGRzWzFdIH4gL15DVkUtLykgewogICAgIyBPdXRwdXQgcHJldmlvdXMgZW50cnkgaWYgZXhpc3RzCiAgICBpZiAoaW5fdnVsbikgewogICAgICAjIFBhcnNlIGZpeGVkIHZlcnNpb25zCiAgICAgIGZpeGVkX3ZlcnNpb25zID0gIltdIgogICAgICBpZiAoc2F2ZWRfZml4ZWRfcmF3ICE9ICIiKSB7CiAgICAgICAgZ3N1YigvXF0gKlxbLywgIl1bIiwgc2F2ZWRfZml4ZWRfcmF3KQogICAgICAgIGdzdWIoL1xbLywgIlwiIiwgc2F2ZWRfZml4ZWRfcmF3KQogICAgICAgIGdzdWIoL1xdLywgIlwiIiwgc2F2ZWRfZml4ZWRfcmF3KQogICAgICAgIGdzdWIoLyIgICoiLywgIlwiLCBcIiIsIHNhdmVkX2ZpeGVkX3JhdykKICAgICAgICBnc3ViKC8iIi8sICJcIiwgXCIiLCBzYXZlZF9maXhlZF9yYXcpCiAgICAgICAgZml4ZWRfdmVyc2lvbnMgPSAiWyIgc2F2ZWRfZml4ZWRfcmF3ICJdIgogICAgICB9CiAgICAgIAogICAgICBjb21wb25lbnRfa2V5ID0gc2F2ZWRfdHlwZSAiOi8vIiBzYXZlZF9hZmZlY3RlZAogICAgICBkaXJlY3RfY29tcG9uZW50ID0gc2F2ZWRfdHlwZSAiOi8vIiBzYXZlZF9kaXJlY3QKICAgICAgCiAgICAgIHByaW50ICIgICAgeyIKICAgICAgcHJpbnQgIiAgICAgIFwidnVsbmVyYWJpbGl0aWVzXCI6IFt7IgogICAgICBwcmludCAiICAgICAgICBcInNldmVyaXR5XCI6IFwiIiBzYXZlZF9zZXZlcml0eSAiXCIsIgogICAgICBwcmludCAiICAgICAgICBcImN2ZXNcIjogW3tcImN2ZVwiOiBcIiIgc2F2ZWRfY3ZlICJcIn1dLCIKICAgICAgcHJpbnQgIiAgICAgICAgXCJjb21wb25lbnRzXCI6IHsiCiAgICAgIHByaW50ICIgICAgICAgICAgXCIiIGNvbXBvbmVudF9rZXkgIlwiOiB7IgogICAgICBwcmludCAiICAgICAgICAgICAgXCJpbXBhY3RfcGF0aHNcIjogW1tudWxsLCB7XCJjb21wb25lbnRfaWRcIjogXCIiIGRpcmVjdF9jb21wb25lbnQgIlwifV1dLCIKICAgICAgcHJpbnQgIiAgICAgICAgICAgIFwiYWZmZWN0ZWRfdmVyc2lvblwiOiBcIiIgc2F2ZWRfYWZmZWN0ZWRfdmVyICJcIiwiCiAgICAgIHByaW50ICIgICAgICAgICAgICBcImZpeGVkX3ZlcnNpb25zXCI6ICIgZml4ZWRfdmVyc2lvbnMKICAgICAgcHJpbnQgIiAgICAgICAgICB9IgogICAgICBwcmludCAiICAgICAgICB9IgogICAgICBwcmludCAiICAgICAgfV0iCiAgICAgIHByaW50ICIgICAgfSwiCiAgICB9CiAgICAKICAgIGZpcnN0ID0gMAogICAgaW5fdnVsbiA9IDEKICAgIAogICAgIyBTdG9yZSBuZXcgdnVsbmVyYWJpbGl0eQogICAgc2F2ZWRfY3ZlID0gZmllbGRzWzFdCiAgICBzYXZlZF9zZXZlcml0eSA9IGZpZWxkc1syXQogICAgc2F2ZWRfZGlyZWN0ID0gZmllbGRzWzNdCiAgICBzYXZlZF9kaXJlY3RfdmVyID0gZmllbGRzWzRdCiAgICBzYXZlZF9hZmZlY3RlZCA9IGZpZWxkc1s1XQogICAgc2F2ZWRfYWZmZWN0ZWRfdmVyID0gZmllbGRzWzZdCiAgICBzYXZlZF9maXhlZF9yYXcgPSBmaWVsZHNbN10KICAgIHNhdmVkX3R5cGUgPSB0b2xvd2VyKGZpZWxkc1s4XSkKICB9CiAgIyBDb250aW51YXRpb24gbGluZSAtIGFwcGVuZCB0byBwcmV2aW91cyBmaWVsZAogIGVsc2UgaWYgKGluX3Z1bG4gJiYgZmllbGRzWzFdID09ICIiICYmIGZpZWxkc1syXSA9PSAiIikgewogICAgaWYgKGZpZWxkc1szXSAhPSAiIikgewogICAgICBzYXZlZF9kaXJlY3QgPSBzYXZlZF9kaXJlY3QgZmllbGRzWzNdCiAgICB9CiAgICBpZiAoZmllbGRzWzVdICE9ICIiKSB7CiAgICAgIHNhdmVkX2FmZmVjdGVkID0gc2F2ZWRfYWZmZWN0ZWQgZmllbGRzWzVdCiAgICB9CiAgICBpZiAoZmllbGRzWzddICE9ICIiKSB7CiAgICAgIHNhdmVkX2ZpeGVkX3JhdyA9IHNhdmVkX2ZpeGVkX3JhdyAiICIgZmllbGRzWzddCiAgICB9CiAgfQp9CgpFTkQgewogIGlmIChpbl92dWxuKSB7CiAgICAjIE91dHB1dCB0aGUgbGFzdCBlbnRyeQogICAgZml4ZWRfdmVyc2lvbnMgPSAiW10iCiAgICBpZiAoc2F2ZWRfZml4ZWRfcmF3ICE9ICIiKSB7CiAgICAgIGdzdWIoL1xdICpcWy8sICJdWyIsIHNhdmVkX2ZpeGVkX3JhdykKICAgICAgZ3N1YigvXFsvLCAiXCIiLCBzYXZlZF9maXhlZF9yYXcpCiAgICAgIGdzdWIoL1xdLywgIlwiIiwgc2F2ZWRfZml4ZWRfcmF3KQogICAgICBnc3ViKC8iICAqIi8sICJcIiwgXCIiLCBzYXZlZF9maXhlZF9yYXcpCiAgICAgIGdzdWIoLyIiLywgIlwiLCBcIiIsIHNhdmVkX2ZpeGVkX3JhdykKICAgICAgZml4ZWRfdmVyc2lvbnMgPSAiWyIgc2F2ZWRfZml4ZWRfcmF3ICJdIgogICAgfQogICAgCiAgICBjb21wb25lbnRfa2V5ID0gc2F2ZWRfdHlwZSAiOi8vIiBzYXZlZF9hZmZlY3RlZAogICAgZGlyZWN0X2NvbXBvbmVudCA9IHNhdmVkX3R5cGUgIjovLyIgc2F2ZWRfZGlyZWN0CiAgICAKICAgIHByaW50ICIgICAgeyIKICAgIHByaW50ICIgICAgICBcInZ1bG5lcmFiaWxpdGllc1wiOiBbeyIKICAgIHByaW50ICIgICAgICAgIFwic2V2ZXJpdHlcIjogXCIiIHNhdmVkX3NldmVyaXR5ICJcIiwiCiAgICBwcmludCAiICAgICAgICBcImN2ZXNcIjogW3tcImN2ZVwiOiBcIiIgc2F2ZWRfY3ZlICJcIn1dLCIKICAgIHByaW50ICIgICAgICAgIFwiY29tcG9uZW50c1wiOiB7IgogICAgcHJpbnQgIiAgICAgICAgICBcIiIgY29tcG9uZW50X2tleSAiXCI6IHsiCiAgICBwcmludCAiICAgICAgICAgICAgXCJpbXBhY3RfcGF0aHNcIjogW1tudWxsLCB7XCJjb21wb25lbnRfaWRcIjogXCIiIGRpcmVjdF9jb21wb25lbnQgIlwifV1dLCIKICAgIHByaW50ICIgICAgICAgICAgICBcImFmZmVjdGVkX3ZlcnNpb25cIjogXCIiIHNhdmVkX2FmZmVjdGVkX3ZlciAiXCIsIgogICAgcHJpbnQgIiAgICAgICAgICAgIFwiZml4ZWRfdmVyc2lvbnNcIjogIiBmaXhlZF92ZXJzaW9ucwogICAgcHJpbnQgIiAgICAgICAgICB9IgogICAgcHJpbnQgIiAgICAgICAgfSIKICAgIHByaW50ICIgICAgICB9XSIKICAgIHByaW50ICIgICAgfSIKICB9CiAgcHJpbnQgIl0iCn0KJyAiJElOUFVUX1RBQkxFIiA+ICIkSU5QVVRfSlNPTiIKCiMgVmFsaWRhdGUgSlNPTgppZiAhIGpxIGVtcHR5ICIkSU5QVVRfSlNPTiIgMj4vZGV2L251bGw7IHRoZW4KICBlY2hvICLinYwgRmFpbGVkIHRvIGNyZWF0ZSB2YWxpZCBKU09OIgogIGNhdCAiJElOUFVUX0pTT04iCiAgZXhpdCAxCmZpCgplY2hvICLinIUgSlNPTiBjcmVhdGVkOiAkSU5QVVRfSlNPTiIKCiMgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiMgMu+4j+KDoyBTZXZlcml0eSBjb3VudHMKIyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KcmVhZCBDUklUSUNBTCBISUdIIE1FRElVTSBMT1cgPDw8ICQoCmpxIC1yICcKLltdCnwgc2VsZWN0KC52dWxuZXJhYmlsaXRpZXMgIT0gbnVsbCkKfCAudnVsbmVyYWJpbGl0aWVzW10KfCAuc2V2ZXJpdHkKJyAiJElOUFVUX0pTT04iIHwgYXdrICcKeyBjWyQxXSsrIH0KRU5EIHsKICBwcmludCBjWyJDcml0aWNhbCJdKzAsIGNbIkhpZ2giXSswLCBjWyJNZWRpdW0iXSswLCBjWyJMb3ciXSswCn0nCikKCmVjaG8gIvCfk4ogQ291bnRzOiBDcml0aWNhbD0kQ1JJVElDQUwsIEhpZ2g9JEhJR0gsIE1lZGl1bT0kTUVESVVNLCBMb3c9JExPVyIKCiMgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiMgM++4j+KDoyBQYXJlbnQgU2xhY2sgbWVzc2FnZQojIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQpyZWFkIC1yIC1kICcnIFBBUkVOVF9QQVlMT0FEIDw8SlNPTgp7CiAgImNoYW5uZWwiOiAiJFhSQVlfU0xBQ0tfQ0hBTk5FTCIsCiAgImJsb2NrcyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiaGVhZGVyIiwKICAgICAgInRleHQiOiB7ICJ0eXBlIjogInBsYWluX3RleHQiLCAidGV4dCI6ICLwn5qoIERlcGVuZGVuY3kgVnVsbmVyYWJpbGl0eSBSZXBvcnQiIH0KICAgIH0sCiAgICB7CiAgICAgICJ0eXBlIjogInNlY3Rpb24iLAogICAgICAidGV4dCI6IHsgInR5cGUiOiAibXJrZHduIiwgInRleHQiOiAiKlByb2plY3Q6KiAkQkFTRU5BTUUiIH0KICAgIH0sCiAgICB7CiAgICAgICJ0eXBlIjogInNlY3Rpb24iLAogICAgICAidGV4dCI6IHsKICAgICAgICAidHlwZSI6ICJtcmtkd24iLAogICAgICAgICJ0ZXh0IjogIvCflLQgKkNyaXRpY2FsOiogJENSSVRJQ0FMICAgIPCflKUgKkhpZ2g6KiAkSElHSCAgICDwn46DICpNZWRpdW06KiAkTUVESVVNICAiCiAgICAgIH0KICAgIH0sCiAgICB7CiAgICAgICJ0eXBlIjogImNvbnRleHQiLAogICAgICAiZWxlbWVudHMiOiBbCiAgICAgICAgeyAidHlwZSI6ICJtcmtkd24iLCAidGV4dCI6ICJEZXRhaWxlZCBmaW5kaW5ncyBhcmUgcG9zdGVkIGluIHRoZSB0aHJlYWQgYmVsb3cg8J+RhyIgfQogICAgICBdCiAgICB9LAogICAgeyAidHlwZSI6ICJkaXZpZGVyIiB9CiAgXQp9CkpTT04KClBBUkVOVF9SRVNQT05TRT0kKGN1cmwgLXMgLVggUE9TVCAiJFNMQUNLX0FQSSIgXAogIC1IICJBdXRob3JpemF0aW9uOiBCZWFyZXIgJFhSQVlfU0xBQ0tfVE9LRU4iIFwKICAtSCAiQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9qc29uIiBcCiAgLS1kYXRhICIkUEFSRU5UX1BBWUxPQUQiKQoKVEhSRUFEX1RTPSQoZWNobyAiJFBBUkVOVF9SRVNQT05TRSIgfCBqcSAtciAnLnRzJykKCmlmIFtbIC16ICIkVEhSRUFEX1RTIiB8fCAiJFRIUkVBRF9UUyIgPT0gIm51bGwiIF1dOyB0aGVuCiAgZWNobyAi4p2MIEZhaWxlZCB0byBjcmVhdGUgcGFyZW50IG1lc3NhZ2UiCiAgZWNobyAiJFBBUkVOVF9SRVNQT05TRSIKICBleGl0IDEKZmkKCmVjaG8gIuKchSBQYXJlbnQgbWVzc2FnZSBjcmVhdGVkLiB0aHJlYWRfdHM9JFRIUkVBRF9UUyIKCiMgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiMgNO+4j+KDoyBUaHJlYWQgZW50cmllcyAoc29ydGVkLCBDVkUgbGlua3MpCiMgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCmpxIC1yICcKZGVmIHJhbms6CiAgaWYgLiA9PSAiQ3JpdGljYWwiIHRoZW4gMAogIGVsaWYgLiA9PSAiSGlnaCIgICB0aGVuIDEKICBlbGlmIC4gPT0gIk1lZGl1bSIgdGhlbiAyCiAgZWxpZiAuID09ICJMb3ciICAgIHRoZW4gMwogIGVsc2UgOSBlbmQ7CgpbCiAgLltdCiAgfCBzZWxlY3QoLnZ1bG5lcmFiaWxpdGllcyAhPSBudWxsKQogIHwgLnZ1bG5lcmFiaWxpdGllc1tdCiAgfCAuIGFzICR2CiAgfCAoJHYuY29tcG9uZW50cyB8IHRvX2VudHJpZXNbXSkgYXMgJGNvbXAKICB8ICgkdi5jdmVzIC8vIFt7Y3ZlOiJOL0EifV0pW10KICB8IHsKICAgICAgc2V2OiAkdi5zZXZlcml0eSwKICAgICAgcjogKCR2LnNldmVyaXR5IHwgcmFuayksCiAgICAgIHRleHQ6ICIqPGh0dHBzOi8vbnZkLm5pc3QuZ292L3Z1bG4vZGV0YWlsL1woLmN2ZSl8XCguY3ZlKT4qXG4qSW1wYWN0ZWQ6KiBgXCgKICAgICAgICAkY29tcC5rZXkgfCBzdWIoIl5bYS16XSs6Ly8iOyAiIikKICAgICAgKWAgdlwoCiAgICAgICAgJGNvbXAudmFsdWUuYWZmZWN0ZWRfdmVyc2lvbiAvLyAiTi9BIgogICAgICApXG4qRml4ZWQgaW46KiBcKAogICAgICAgICgkY29tcC52YWx1ZS5maXhlZF92ZXJzaW9ucyAvLyBbXSkKICAgICAgICB8IGpvaW4oIiwgIikKICAgICAgICB8IGlmIC4gPT0gIiIgdGhlbiAiTi9BIiBlbHNlIC4gZW5kCiAgICAgIClcbipEaXJlY3QgZGVwZW5kZW5jaWVzOipcbuKAoiBcKAogICAgICAgICRjb21wLnZhbHVlLmltcGFjdF9wYXRoc1swXVsxXS5jb21wb25lbnRfaWQKICAgICAgICB8IHN1YigiXlthLXpdKzovLyI7ICIiKQogICAgICApIgogICAgfQpdCnwgc29ydF9ieSgucikKfCAuW10KfCBbLnNldiwgLnRleHRdCnwgQHRzdgonICIkSU5QVVRfSlNPTiIgfAp3aGlsZSBJRlM9JCdcdCcgcmVhZCAtciBTRVYgVEVYVDsgZG8KCiAgRU1PSkk9IvCfkbsiCiAgW1sgIiRTRVYiID09ICJDcml0aWNhbCIgXV0gJiYgRU1PSkk9IvCflLQiCiAgW1sgIiRTRVYiID09ICJIaWdoIiAgICAgXV0gJiYgRU1PSkk9IvCflKUiCiAgW1sgIiRTRVYiID09ICJNZWRpdW0iICAgXV0gJiYgRU1PSkk9IvCfjoMiCgogIHJlYWQgLXIgLWQgJycgVEhSRUFEX1BBWUxPQUQgPDxKU09OCnsKICAiY2hhbm5lbCI6ICIkWFJBWV9TTEFDS19DSEFOTkVMIiwKICAidGhyZWFkX3RzIjogIiRUSFJFQURfVFMiLAogICJibG9ja3MiOiBbCiAgICB7CiAgICAgICJ0eXBlIjogInNlY3Rpb24iLAogICAgICAidGV4dCI6IHsKICAgICAgICAidHlwZSI6ICJtcmtkd24iLAogICAgICAgICJ0ZXh0IjogIiRFTU9KSSAqJFNFVipcbiRURVhUIgogICAgICB9CiAgICB9CiAgXQp9CkpTT04KCiAgY3VybCAtcyAtWCBQT1NUICIkU0xBQ0tfQVBJIiBcCiAgICAtSCAiQXV0aG9yaXphdGlvbjogQmVhcmVyICRYUkFZX1NMQUNLX1RPS0VOIiBcCiAgICAtSCAiQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9qc29uIiBcCiAgICAtLWRhdGEgIiRUSFJFQURfUEFZTE9BRCIgPiAvZGV2L251bGwKICAKICAjIFNtYWxsIGRlbGF5IHRvIGF2b2lkIHJhdGUgbGltaXRpbmcKICBzbGVlcCAwLjEKCmRvbmUKCmVjaG8gIuKchSBBbGwgdnVsbmVyYWJpbGl0aWVzIHBvc3RlZCB0byB0aHJlYWQiCg==' | base64 -d > xray.sh
-            - chmod +x xray.sh
-            
-            # Run Xray scan
-            - |
-              echo "🔍 Running JFrog Xray scan..."
-              set +e
-              jf audit $PROJECT_TYPE --server-id=scan1 --format table --min-severity Medium . > xray.txt
-              SCAN_EXIT_CODE=$?
-              set -e
-              echo "Scan completed with exit code: $SCAN_EXIT_CODE"
-            - cat xray.txt
-            # Cleanup JFrog config
-            - jf config remove scan1 || true
-            
-            # Send to Slack
-            - |
-              if [ -n "$XRAY_SLACK_TOKEN" ] && [ -n "$XRAY_SLACK_CHANNEL" ]; then
-                echo "📤 Sending results to Slack..."
-                bash xray.sh
-              else
-                echo "⚠️  Slack tokens not configured, skipping notification"
-              fi
-
-pipelines:
-  pull-requests:
-    '**':
-      - step:
-          runs-on:
-            - self.hosted
-            - linux.shell
-          name: On Pull Request
-          script:
-            - npm install -g pnpm
-            - pnpm config set //registry.npmjs.org/:_authToken $DOCUPACE_NPM_TOKEN
-            - pnpm install --frozen-lockfile
-            - 'npx eslint . --rule "no-unused-vars: warn" --rule "no-useless-escape: warn" --color'
-            - pnpm test
-          artifacts:
-            - coverage/**
-          after-script:
-            - echo "Pipeline completed with status $BITBUCKET_EXIT_CODE"
-
-  custom:
-    scheduled-tests:
-      - step:
-          runs-on:
-            - self.hosted
-            - linux.shell
-          name: Scheduled Tests
-          script:
-            - npm install -g pnpm
-            - pnpm config set //registry.npmjs.org/:_authToken $DOCUPACE_NPM_TOKEN
-            - pnpm install --frozen-lockfile
-            - 'npx eslint . --rule "no-unused-vars: warn" --rule "no-useless-escape: warn" --color'
-            - pnpm test
-          artifacts:
-            - coverage/**
-          after-script:
-            - echo "Pipeline completed with status $BITBUCKET_EXIT_CODE"
-
-  branches:
-    main:
-      - step:
-          runs-on:
-            - self.hosted
-            - linux.shell
-          name: Main Branch Build
-          script:
-            - npm install -g pnpm
-            - pnpm config set //registry.npmjs.org/:_authToken $DOCUPACE_NPM_TOKEN
-            - pnpm install --frozen-lockfile
-            - 'npx eslint . --rule "no-unused-vars: warn" --rule "no-useless-escape: warn" --color'
-            - pnpm test
-          artifacts:
-            - coverage/**
-
-
-

package/jest.config.js

@@ -1,15 +0,0 @@
-// jest.config.js
-export default {
-  testEnvironment: 'node',
-  transform: {},
-  verbose: true,
-  collectCoverage: true,
-  coverageDirectory: 'coverage',
-  coverageReporters: ['text', 'lcov', 'json', 'html'],
-  collectCoverageFrom: [
-    'src/**/*.{js,ts}',
-    '!src/**/cli.js',
-    '!src/**/*.test.{js,ts}',
-    '!**/node_modules/**',
-  ],
-};

package/src/auth0/alias.js

@@ -1,79 +0,0 @@
-import axios from 'axios';
-import { createAlias } from '../next/alias.js';
-import { getAuth0AuthToken } from './configure.js';
-import { getVaultSecrets } from './vault.js';
-import { getVaultSecretsConfigs } from '../next/config.js';
-import { cloneEnvRepository, readDeployConfig } from '../next/deploy.js';
-
-export async function getCCAlias({ application, auth0Domain, auth0AuthToken }) {
-  console.log(`Forming alias name for application ${application}...`);
-
-  try {
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0AuthToken}` },
-      },
-    );
-
-    const appAuth0ClientIdData = auth0Response.data.find(
-      (client) => client.name === `${application}`,
-    );
-    const appAuth0ClientId = appAuth0ClientIdData.client_id;
-
-    console.log(`Client Credentials Alias: ${appAuth0ClientId}@clients`);
-    return `${appAuth0ClientId}@clients`;
-  } catch (err) {
-    console.error(
-      `Failed to form alias name for application: ${application}: ${err.message}`,
-    );
-  }
-}
-
-export async function configureAlias(
-  site,
-  env,
-  username,
-  password,
-  realm,
-  auth0Tenant,
-) {
-  console.log(`Creating alias for site: ${site} in env: ${env}`);
-  // Site Common Secrets
-  const siteCommonSecretsPath =
-    getVaultSecretsConfigs(site).siteCommonSecretsPath;
-  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-  const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-
-  let auth0Domain;
-  if (auth0Tenant === '') {
-    auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
-  } else {
-    auth0Domain = `${auth0Tenant}.us.auth0.com`;
-  }
-  const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-  const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-  const auth0Token = await getAuth0AuthToken(
-    auth0Domain,
-    auth0ClientId,
-    auth0ClientSecret,
-  );
-
-  await cloneEnvRepository(env);
-
-  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
-    'graphql-server',
-    env,
-    site,
-    'values',
-  );
-  const coreUrl = deployGraphQLServerConfig.graphqlServer.coreUrl;
-
-  const clientCredentialsAlias = await getCCAlias({
-    application: 'docupace-graphql-client-credentials',
-    auth0Domain: auth0Domain,
-    auth0AuthToken: auth0Token,
-  });
-
-  await createAlias(coreUrl, username, password, realm, clientCredentialsAlias);
-}

package/src/auth0/alias.test.js

@@ -1,172 +0,0 @@
-// alias.test.js
-import { jest } from '@jest/globals';
-
-// --------- ESM-Compatible Mocks ---------
-jest.unstable_mockModule('axios', () => ({
-  default: {
-    get: jest.fn(),
-  },
-}));
-
-jest.unstable_mockModule('../next/alias.js', () => ({
-  createAlias: jest.fn(),
-}));
-
-jest.unstable_mockModule('./configure.js', () => ({
-  getAuth0AuthToken: jest.fn(),
-}));
-
-jest.unstable_mockModule('./vault.js', () => ({
-  getVaultSecrets: jest.fn(),
-}));
-
-jest.unstable_mockModule('../next/config.js', () => ({
-  getVaultSecretsConfigs: jest.fn(),
-}));
-
-jest.unstable_mockModule('../next/deploy.js', () => ({
-  cloneEnvRepository: jest.fn(),
-  readDeployConfig: jest.fn(),
-}));
-
-// --------- Import AFTER mocks ---------
-const { configureAlias, getCCAlias } = await import('./alias.js');
-const axios = (await import('axios')).default;
-const { createAlias } = await import('../next/alias.js');
-const { getAuth0AuthToken } = await import('./configure.js');
-const { getVaultSecrets } = await import('./vault.js');
-const { getVaultSecretsConfigs } = await import('../next/config.js');
-const { cloneEnvRepository, readDeployConfig } = await import(
-  '../next/deploy.js'
-);
-
-// --------- Shared Test Setup ---------
-beforeAll(() => {
-  jest.spyOn(console, 'log').mockImplementation(() => {}); // silence logs
-});
-
-afterAll(() => {
-  console.log.mockRestore();
-});
-
-describe('configureAlias', () => {
-  const site = 'example';
-  const env = 'dev';
-  const username = 'admin';
-  const password = 'pass';
-  const realm = 'Users';
-  const auth0Tenant = '';
-
-  const mockSecrets = {
-    AUTH0_CLIENT_ID: 'client-id',
-    AUTH0_CLIENT_SECRET: 'client-secret',
-  };
-
-  const mockToken = 'mocked-auth0-token';
-
-  const mockClients = [
-    { name: 'docupace-graphql-client-credentials', client_id: 'client-123' },
-  ];
-
-  const mockConfig = {
-    deployConfig: {
-      graphqlServer: {
-        coreUrl: 'https://core.example.com',
-      },
-    },
-  };
-
-  beforeEach(() => {
-    jest.clearAllMocks();
-
-    getVaultSecretsConfigs.mockReturnValue({
-      siteCommonSecretsPath: 'vault/path/to/secrets',
-    });
-
-    getVaultSecrets.mockResolvedValue(mockSecrets);
-    getAuth0AuthToken.mockResolvedValue(mockToken);
-    axios.get.mockResolvedValue({ data: mockClients });
-    cloneEnvRepository.mockResolvedValue(undefined);
-    readDeployConfig.mockResolvedValue(mockConfig);
-    createAlias.mockResolvedValue(undefined);
-  });
-
-  it('should configure alias with default tenant and call all required steps', async () => {
-    await configureAlias(site, env, username, password, realm, auth0Tenant);
-
-    expect(getVaultSecretsConfigs).toHaveBeenCalledWith(site);
-    expect(getVaultSecrets).toHaveBeenCalledWith('vault/path/to/secrets');
-
-    expect(getAuth0AuthToken).toHaveBeenCalledWith(
-      'docupace-dev-example.us.auth0.com',
-      'client-id',
-      'client-secret',
-    );
-
-    expect(cloneEnvRepository).toHaveBeenCalledWith(env);
-
-    expect(readDeployConfig).toHaveBeenCalledWith(
-      'graphql-server',
-      env,
-      site,
-      'values',
-    );
-
-    expect(axios.get).toHaveBeenCalledWith(
-      'https://docupace-dev-example.us.auth0.com/api/v2/clients',
-      { headers: { authorization: `Bearer ${mockToken}` } },
-    );
-
-    expect(createAlias).toHaveBeenCalledWith(
-      'https://core.example.com',
-      username,
-      password,
-      realm,
-      'client-123@clients',
-    );
-  });
-});
-
-describe('getCCAlias', () => {
-  const application = 'docupace-graphql-client-credentials';
-  const auth0Domain = 'example.auth0.com';
-  const auth0AuthToken = 'token';
-
-  it('should return correct alias string for client', async () => {
-    axios.get.mockResolvedValue({
-      data: [{ name: application, client_id: 'abc123' }],
-    });
-
-    const alias = await getCCAlias({
-      application,
-      auth0Domain,
-      auth0AuthToken,
-    });
-    expect(alias).toBe('abc123@clients');
-
-    expect(axios.get).toHaveBeenCalledWith(
-      'https://example.auth0.com/api/v2/clients',
-      { headers: { authorization: 'Bearer token' } },
-    );
-  });
-
-  it('should log error and return undefined if axios fails', async () => {
-    axios.get.mockRejectedValue(new Error('Network error'));
-    const errorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
-
-    const result = await getCCAlias({
-      application,
-      auth0Domain,
-      auth0AuthToken,
-    });
-    expect(result).toBeUndefined();
-
-    expect(errorSpy).toHaveBeenCalledWith(
-      expect.stringContaining(
-        'Failed to form alias name for application: docupace-graphql-client-credentials: Network error',
-      ),
-    );
-
-    errorSpy.mockRestore();
-  });
-});

package/src/auth0/cli.js

@@ -1,82 +0,0 @@
-#!/usr/bin/env node
-
-import { Command } from 'commander';
-import { configureFromSite } from './configure.js';
-import { getVaultSecrets } from './vault.js';
-
-import dotenv from 'dotenv';
-import { configureAlias } from './alias.js';
-import { exportConf } from './export.js';
-import { getAuth0Metadata } from './metadata.js';
-
-dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
-
-const program = new Command();
-
-program
-  .command(
-    'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3Ui> <deployCCUI> <useS3Gq> [auth0Tenant]',
-  )
-  .description('Configure the Auth0 tenants in env for the given site')
-  .action(
-    async (
-      fromSite,
-      toSite,
-      fromEnv,
-      toEnv,
-      deployUI,
-      deployGraphQLServer,
-      useNewDomain,
-      useS3Ui,
-      deployCCUI,
-      useS3Gq,
-      auth0Tenant = '',
-    ) => {
-      await configureFromSite(
-        fromSite,
-        toSite,
-        fromEnv,
-        toEnv,
-        deployUI,
-        deployGraphQLServer,
-        useNewDomain,
-        useS3Ui === 'true' || useS3Ui === true,
-        deployCCUI,
-        useS3Gq === 'true' || useS3Gq === true,
-        auth0Tenant,
-      );
-    },
-  );
-
-program
-  .command('getVaultSecrets <vaultPath>')
-  .description('Get Secrets for Vault PATH')
-  .action(async (vaultPath) => {
-    const data = await getVaultSecrets(vaultPath);
-    console.log(JSON.stringify(data, 'null', 2));
-  });
-
-program
-  .command(
-    'configureAlias <site> <env> <username> <password> <realm> [auth0Tenant]',
-  )
-  .description('Configure Core Alias for the given site')
-  .action(async (site, env, username, password, realm, auth0Tenant = '') => {
-    await configureAlias(site, env, username, password, realm, auth0Tenant);
-  });
-
-program
-  .command('exportConf <site> <env> [auth0Tenant]')
-  .description('Export Auth0 configuration for the given site')
-  .action(async (site, env, auth0Tenant = '') => {
-    await exportConf(site, env, auth0Tenant);
-  });
-
-program
-  .command('getAuth0Metadata <site> <env> [auth0Tenant] [jiraTicket]')
-  .description('Get Auth0 metadata for the given site')
-  .action(async (site, env, auth0Tenant = '', jiraTicket = '') => {
-    await getAuth0Metadata(site, env, auth0Tenant, jiraTicket);
-  });
-
-program.parse(process.argv);