@networkpro/web 1.24.0 → 1.24.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/workflows/secret-scan.yml +9 -1
- package/.lighthouserc.cjs +1 -1
- package/CHANGELOG.md +14 -0
- package/cspell.json +1 -0
- package/package.json +1 -1
|
@@ -18,6 +18,7 @@ jobs:
|
|
|
18
18
|
permissions:
|
|
19
19
|
contents: read
|
|
20
20
|
security-events: write
|
|
21
|
+
issues: write
|
|
21
22
|
steps:
|
|
22
23
|
# ---------------------------------------------------------------------
|
|
23
24
|
# Checkout the full repo history (needed for Gitleaks to scan all commits)
|
|
@@ -58,6 +59,13 @@ jobs:
|
|
|
58
59
|
if: always()
|
|
59
60
|
run: |
|
|
60
61
|
echo "### 🧩 Gitleaks Scan Summary" >> $GITHUB_STEP_SUMMARY
|
|
62
|
+
|
|
63
|
+
# If the JSON report doesn't exist, that usually means no leaks were found.
|
|
64
|
+
if [ ! -f gitleaks-report.json ]; then
|
|
65
|
+
echo "✅ No leaks detected — Gitleaks did not generate a JSON report (expected behavior)." >> $GITHUB_STEP_SUMMARY
|
|
66
|
+
exit 0
|
|
67
|
+
fi
|
|
68
|
+
|
|
61
69
|
if [ -s gitleaks-report.json ]; then
|
|
62
70
|
count=$(jq '.findings | length' gitleaks-report.json)
|
|
63
71
|
if [ "$count" -gt 0 ]; then
|
|
@@ -71,7 +79,7 @@ jobs:
|
|
|
71
79
|
echo "✅ No secrets detected." >> $GITHUB_STEP_SUMMARY
|
|
72
80
|
fi
|
|
73
81
|
else
|
|
74
|
-
echo "⚠️
|
|
82
|
+
echo "⚠️ Report file exists but is empty." >> $GITHUB_STEP_SUMMARY
|
|
75
83
|
fi
|
|
76
84
|
|
|
77
85
|
# ---------------------------------------------------------------------
|
package/.lighthouserc.cjs
CHANGED
package/CHANGELOG.md
CHANGED
|
@@ -22,6 +22,20 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
|
|
|
22
22
|
|
|
23
23
|
---
|
|
24
24
|
|
|
25
|
+
## [1.24.1]
|
|
26
|
+
|
|
27
|
+
### Changed
|
|
28
|
+
|
|
29
|
+
- Bumped project version to `v1.24.1`.
|
|
30
|
+
- Updated **GitLeaks workflow** (`.github/workflows/secret-scan.yml`):
|
|
31
|
+
- Reworked Gitleaks step to use official environment variables (`GITLEAKS_REPORT_PATH`, `GITLEAKS_LICENSE`) for compatibility with `gitleaks/gitleaks-action@v2`.
|
|
32
|
+
- Added explicit handling for runs with no detected secrets (skips JSON parsing when no report is generated).
|
|
33
|
+
- Improved summary step output with clear “No leaks detected” message and reduced false warnings.
|
|
34
|
+
- Ensured consistent artifact uploads and safer fork-handling conditions.
|
|
35
|
+
- Lighthouse now points to the new audit version of the site at [audit.netwk.pro](https://audit.netwk.pro).
|
|
36
|
+
|
|
37
|
+
---
|
|
38
|
+
|
|
25
39
|
## [1.24.0]
|
|
26
40
|
|
|
27
41
|
### Added
|
package/cspell.json
CHANGED
package/package.json
CHANGED