@ibm-cloud/cd-tools 1.15.16 → 1.15.18

package/cmd/copy-toolchain.js

@@ -86,7 +86,11 @@ async function main(options) {
 
 	logger.setVerbosity(verbosity);
 	if (LOG_DUMP) logger.createLogStream(`${LOGS_DIR}/copy-toolchain-${TIME_SUFFIX}.log`);
-	logger.dump(`Options: ${JSON.stringify(options)}\n`);
+
+	// redact apikey option in logs
+	const printOptions = options;
+	printOptions.apikey ? printOptions.apikey = '<API KEY>' : delete printOptions.apikey;
+	logger.dump(`Options: ${JSON.stringify(printOptions)}\n`);
 
 	let bearer;
 	let sourceToolchainId;

package/cmd/utils/import-terraform.js

@@ -14,7 +14,7 @@ import { jsonToTf } from 'json-to-tf';
 
 import { getPipelineData, getToolchainTools } from './requests.js';
 import { runTerraformPlanGenerate, setTerraformEnv } from './terraform.js';
-import { getRandChars, isSecretReference, normalizeName } from './utils.js';
+import { escapeReservedChars, getRandChars, isSecretReference, normalizeName } from './utils.js';
 import { logger } from './logger.js';
 
 import { SECRET_KEYS_MAP, SUPPORTED_TOOLS_MAP } from '../../config.js';
@@ -263,7 +263,7 @@ export async function importTerraform(token, apiKey, region, toolchainId, toolch
                     if (propValue.startsWith(START_INDICATOR) && propValue.endsWith(END_INDICATOR)) {
                         // skip substitution for jsonencode case, don't want to mangle it
                     } else {
-                        newValue = newValue.replace(/\\/g, '\\\\').replace(/\n/g, '\\n').replace(/\r/g, '\\r').replace(/"/g, '\\"');
+                        newValue = escapeReservedChars(propValue);
                     }
                     newTfFileObj['resource'][key][k]['value'] = newValue;
                 }
@@ -314,7 +314,12 @@ export async function importTerraform(token, apiKey, region, toolchainId, toolch
     for (const [key, value] of Object.entries(generatedFileJson['resource'])) {
         for (const [k, v] of Object.entries(value)) {
             if (key === 'ibm_cd_tekton_pipeline_definition' || key === 'ibm_cd_tekton_pipeline_trigger') {
-                if (key === 'ibm_cd_tekton_pipeline_trigger' && !v['source']) continue; // skip triggers without source, which aren't tied to a repo
+                // escape filter, which may contain reserved characters
+                if (key === 'ibm_cd_tekton_pipeline_trigger' && v[0]['filter']) {
+                    newTfFileObj['resource'][key][k]['filter'] = escapeReservedChars(v[0]['filter']);
+                }
+
+                if (key === 'ibm_cd_tekton_pipeline_trigger' && !v[0]['source']) continue; // skip triggers without source, which aren't tied to a repo
                 try {
                     const thisUrl = newTfFileObj['resource'][key][k]['source'][0]['properties'][0]['url'];
 

package/cmd/utils/terraform.js

@@ -16,7 +16,7 @@ import { jsonToTf } from 'json-to-tf';
 
 import { validateToolchainId, validateGritUrl } from './validate.js';
 import { logger, LOG_STAGES } from './logger.js';
-import { getRandChars, promptUserInput, replaceUrlRegion } from './utils.js';
+import { escapeReservedChars, getRandChars, promptUserInput, replaceUrlRegion } from './utils.js';
 
 const CLOUD_PLATFORM = process.env['IBMCLOUD_PLATFORM_DOMAIN'] || 'cloud.ibm.com';
 const DEV_MODE = CLOUD_PLATFORM !== 'cloud.ibm.com';
@@ -31,7 +31,7 @@ const writeFilePromise = promisify(fs.writeFile)
 async function execPromise(command, options) {
     try {
         const exec = promisify(child_process.exec);
-        const { stdout, _ } = await exec(command, options);
+        const { stdout, _ } = await exec(command, {...options, maxBuffer: 10 * 1024 * 1024}); // set max buffer to 10MB
         return stdout.trim();
     } catch (err) {
         throw new Error(`Command failed: ${command} \n${err.stderr || err.stdout}`);
@@ -258,8 +258,16 @@ async function setupTerraformFiles(config) {
             // by default, disable triggers
             if (disableTriggers && newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger']) {
                 for (const key of Object.keys(newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger'])) {
-                    if (newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger'][key]['type'] === 'manual') continue; // skip manual triggers
-                    newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger'][key]['enabled'] = false;
+                    // escape filter, which may contain reserved characters
+                    const filterVal = newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger'][key]['filter'];
+                    if (filterVal) {
+                        newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger'][key]['filter'] = escapeReservedChars(filterVal);
+                    }
+
+                    // disable all triggers (timed, git, webhooks) except manual triggers
+                    if (newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger'][key]['type'] != 'manual') {
+                        newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger'][key]['enabled'] = false;
+                    }
                 }
             }
 
@@ -360,7 +368,7 @@ async function setupTerraformFiles(config) {
                         if (thisValue.startsWith(START_INDICATOR) && thisValue.endsWith(END_INDICATOR)) {
                             // skip newline substitution for jsonencode case, don't want to mangle it
                         } else {
-                            newTfFileObj['resource']['ibm_cd_tekton_pipeline_property'][k]['value'] = thisValue.replace(/\\/g, '\\\\').replace(/\n/g, '\\n').replace(/\r/g, '\\r').replace(/"/g, '\\"');
+                            newTfFileObj['resource']['ibm_cd_tekton_pipeline_property'][k]['value'] = escapeReservedChars(thisValue);
                         }
                     }
                 } catch (err) {
@@ -388,7 +396,7 @@ async function setupTerraformFiles(config) {
                         if (thisValue.startsWith(START_INDICATOR) && thisValue.endsWith(END_INDICATOR)) {
                             // skip newline substitution for jsonencode case, don't want to mangle it
                         } else {
-                            newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger_property'][k]['value'] = thisValue.replace(/\\/g, '\\\\').replace(/\n/g, '\\n').replace(/\r/g, '\\r').replace(/"/g, '\\"');
+                            newTfFileObj['resource']['ibm_cd_tekton_pipeline_trigger_property'][k]['value'] = escapeReservedChars(thisValue);
                         }
                     }
                 } catch (err) {

package/cmd/utils/utils.js

@@ -223,4 +223,11 @@ export function normalizeName(str) {
     }
 
     return newStr.toLowerCase();
+};
+
+export function escapeReservedChars(str) {
+    if (!str || typeof str !== 'string') {
+        return str;
+    }
+    return str.replace(/\\/g, '\\\\').replace(/\n/g, '\\n').replace(/\r/g, '\\r').replace(/"/g, '\\"');
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ibm-cloud/cd-tools",
-  "version": "1.15.16",
+  "version": "1.15.18",
   "description": "Tools and utilities for the IBM Cloud Continuous Delivery service and resources",
   "repository": {
     "type": "git",
@@ -40,6 +40,7 @@
     "node-pty": "^1.0.0"
   },
   "overrides": {
-    "serialize-javascript": "^7.0.3"
+    "serialize-javascript": "^7.0.5",
+    "diff": "^8.0.0"
   }
 }

package/test/README.md

@@ -13,14 +13,20 @@ Before running tests, ensure that you have completed the setup steps in the main
     ```bash
     npm install
     ```
-3. **Test configuration**
+3. **Fix node-pty executable**
+
+    macOS only: There is a bug in one of the executables used by `node-pty`, the prebuilt binary is missing the executable flag, causing errors like `Error: posix_spawnp failed.`. You can fix this manually:
+    ```bash
+    chmod +x node_modules/node-pty/prebuilds/darwin-arm64/spawn-helper
+    ```
+4. **Test configuration**
 
     Before running tests, create a local configuration file:
     ```bash
     cp test/config/local.template.json test/config/local.json
     ```
     Then open `test/config/local.json` and replace all placeholder values with your local or test environment settings.
-4. **Running the tests**
+5. **Running the tests**
     
     To execute the test suite:
     ```bash

package/test/copy-toolchain/tf-import.test.js

@@ -1,6 +1,6 @@
 /**
  * Licensed Materials - Property of IBM
- * (c) Copyright IBM Corporation 2025. All Rights Reserved.
+ * (c) Copyright IBM Corporation 2025, 2026. All Rights Reserved.
  *
  * Note to U.S. Government Users Restricted Rights:
  * Use, duplication or disclosure restricted by GSA ADP Schedule
@@ -93,7 +93,7 @@ describe('copy-toolchain: Test import-terraform output', function () {
                     ibm_cd_tekton_pipeline_trigger: 1,
                     ibm_cd_tekton_pipeline_trigger_property: 1,
                     ibm_cd_toolchain: 1,
-                    ibm_cd_toolchain_tool_custom: 1,
+                    ibm_cd_toolchain_tool_cos: 1,
                     ibm_cd_toolchain_tool_devopsinsights: 1,
                     ibm_cd_toolchain_tool_hostedgit: 1,
                     ibm_cd_toolchain_tool_pipeline: 1,

package/test/data/test-toolchains.js

@@ -15,38 +15,28 @@ export const TEST_TOOLCHAINS = {
     },
     'misconfigured': {
         name: 'KEEP-MISCONFIGURED-TOOLCHAIN',
-        crn: 'crn:v1:bluemix:public:toolchain:eu-es:a/9e8559fac61ee9fc74d3e595fa75d147:0ccfaa70-ca90-47db-8246-f4ecfc6ad8f3::',
-        region: 'eu-es'
+        crn: 'crn:v1:bluemix:public:toolchain:eu-gb:a/9e8559fac61ee9fc74d3e595fa75d147:128b55a7-56c3-4cc0-87f7-abb24ff0fc6a::',
+        region: 'eu-gb'
     },
     '1pl-ghe-cc': {
         name: 'KEEP-1PL-GHE-CC',
-        crn: 'crn:v1:bluemix:public:toolchain:eu-es:a/9e8559fac61ee9fc74d3e595fa75d147:9d51bb6b-f659-4ab7-9bc4-2eae1d61f4e7::',
-        region: 'eu-es'
+        crn: 'crn:v1:bluemix:public:toolchain:eu-de:a/9e8559fac61ee9fc74d3e595fa75d147:6d75fa57-4eb0-4654-a664-58233ee2aad2::',
+        region: 'eu-de'
     },
     '1pl-ghe-cd': {
         name: 'KEEP-1PL-GHE-CD',
-        crn: 'crn:v1:bluemix:public:toolchain:eu-es:a/9e8559fac61ee9fc74d3e595fa75d147:6a70313f-a927-4b0e-8471-70f17330998d::',
-        region: 'eu-es'
+        crn: 'crn:v1:bluemix:public:toolchain:eu-de:a/9e8559fac61ee9fc74d3e595fa75d147:34df7ab1-bb87-4c34-bf72-1e83d04b0999::',
+        region: 'eu-de'
     },
     '1pl-ghe-ci': {
         name: 'KEEP-1PL-GHE-CI',
-        crn: 'crn:v1:bluemix:public:toolchain:eu-es:a/9e8559fac61ee9fc74d3e595fa75d147:6b8e27ae-5924-4a38-8819-f405366cb900::',
-        region: 'eu-es'
-    },
-    'devsecops-grit-cc': {
-        name: 'KEEP-DevSecOps-GRIT-CC',
-        crn: 'crn:v1:bluemix:public:toolchain:eu-es:a/9e8559fac61ee9fc74d3e595fa75d147:920f6a94-4c1b-412b-b95c-baf823958744::',
-        region: 'eu-es'
-    },
-    'devsecops-grit-cd': {
-        name: 'KEEP-DevSecOps-GRIT-CD',
-        crn: 'crn:v1:bluemix:public:toolchain:eu-es:a/9e8559fac61ee9fc74d3e595fa75d147:8618565f-08fa-4cac-9250-029cac7b41ba::',
-        region: 'eu-es'
+        crn: 'crn:v1:bluemix:public:toolchain:eu-de:a/9e8559fac61ee9fc74d3e595fa75d147:7769bb82-0ef5-4b5d-92c1-5089ac7ff385::',
+        region: 'eu-de'
     },
     'devsecops-grit-ci': {
         name: 'KEEP-DevSecOps-GRIT-CI',
-        crn: 'crn:v1:bluemix:public:toolchain:eu-es:a/9e8559fac61ee9fc74d3e595fa75d147:cdc271bc-cc07-4a85-beb2-895e033319b0::',
-        region: 'eu-es'
+        crn: 'crn:v1:bluemix:public:toolchain:eu-de:a/9e8559fac61ee9fc74d3e595fa75d147:1befe39f-e278-439b-a59a-fb16f14119c3::',
+        region: 'eu-de'
     },
     'single-pl': {
         name: 'KEEP-SINGLE-PIPELINE-TOOLCHAIN',