@pixpilot/scaffoldfy-configs 0.40.3 → 0.41.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @pixpilot/scaffoldfy-configs
 
+## 0.41.0
+
+### Minor Changes
+
+- add CodeQL workflow for private repositories
+
+## 0.40.4
+
+### Patch Changes
+
+- update notification step for release status
+
 ## 0.40.3
 
 ### Patch Changes

package/README.md

@@ -14,6 +14,16 @@ This package provides the following scaffoldfy templates:
 
 <!-- scaffoldfy-templates:start -->
 
+### codeql-private-repo
+
+Replaces the CodeQL workflow with the pixpilot/codeql-scanner action for private repositories
+
+Usage:
+
+```sh
+npx @pixpilot/scaffoldfy@latest --config https://unpkg.com/@pixpilot/scaffoldfy-configs@latest/codeql-private-repo/scaffoldfy.json
+```
+
 ### license-file
 
 Generate a LICENSE file with common open-source licenses

package/codeql-private-repo/codeql-analysis.yml

@@ -0,0 +1,39 @@
+name: CodeQL Analyser
+
+permissions:
+  security-events: write
+  actions: read
+  contents: read
+  issues: write # Required for pixpilot/codeql-scanner@main
+
+on:
+  push:
+    branches:
+      - main
+      - master
+  pull_request:
+    branches:
+      - main
+      - master
+  schedule:
+    #        ┌───────────── minute (0 - 59)
+    #        │  ┌───────────── hour (0 - 23)
+    #        │  │ ┌───────────── day of the month (1 - 31)
+    #        │  │ │ ┌───────────── month (1 - 12 or JAN-DEC)
+    #        │  │ │ │ ┌───────────── day of the week (0 - 6 or SUN-SAT)
+    #        │  │ │ │ │
+    #        *  * * * *
+    - cron: '30 1 * * 0' # Every Sunday at 01:30 UTC
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run CodeQL Scanner
+        uses: pixpilot/codeql-scanner@main
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          config-file: .github/codeql/codeql-config.yml

package/codeql-private-repo/scaffoldfy.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "../node_modules/@pixpilot/scaffoldfy/schema/scaffoldfy.schema.json",
+  "name": "codeql-private-repo",
+  "description": "Replaces the CodeQL workflow with the pixpilot/codeql-scanner action for private repositories",
+  "prompts": [
+    {
+      "id": "isPrivateRepo",
+      "type": "confirm",
+      "message": "Is this a private repository?",
+      "default": {
+        "type": "exec",
+        "value": "node -e \"try{process.stdout.write(require('child_process').execSync('gh repo view --json isPrivate -q .isPrivate',{stdio:['ignore','pipe','ignore']}).toString().trim())}catch{process.stdout.write('false')}\""
+      }
+    }
+  ],
+  "tasks": [
+    {
+      "id": "codeql-private-repo-workflow",
+      "name": "Replace CodeQL workflow for private repo",
+      "description": "Overwrites the CodeQL workflow to use pixpilot/codeql-scanner",
+      "enabled": {
+        "type": "condition",
+        "value": "isPrivateRepo === true"
+      },
+      "type": "write",
+      "config": {
+        "templateFile": "codeql-analysis.yml",
+        "file": ".github/workflows/codeql-analysis.yml"
+      }
+    }
+  ]
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pixpilot/scaffoldfy-configs",
   "type": "module",
-  "version": "0.40.3",
+  "version": "0.41.0",
   "author": "PixPilot <m.doaie@hotmail.com>",
   "license": "MIT",
   "repository": {
@@ -32,8 +32,8 @@
     "@internal/eslint-config": "0.3.0",
     "@internal/prettier-config": "0.0.1",
     "@internal/tsdown-config": "0.1.0",
-    "@internal/vitest-config": "0.1.0",
-    "@pixpilot/scaffoldfy": "0.55.1"
+    "@pixpilot/scaffoldfy": "0.55.1",
+    "@internal/vitest-config": "0.1.0"
   },
   "prettier": "@internal/prettier-config",
   "publishConfig": {

package/pixpilot-changesets-release/release-github-packages.yml

@@ -62,15 +62,16 @@ jobs:
           provenance: 'false'
 
   notify:
-    name: Notify on Release Failure
+    name: Notify Release Status
     needs: [ci, release]
     if: always()
     runs-on: ubuntu-latest
 
     steps:
-      - name: Send Telegram notification
+      - name: Send Telegram release-status notification
         uses: pixpilot/notify-action@v1
         with:
           status: ${{ contains(needs.*.result, 'failure') && 'failure' || contains(needs.*.result, 'cancelled') && 'cancelled' || 'success' }}
+          notify-on: any
           telegram-bot-token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
           telegram-chat-id: ${{ secrets.TELEGRAM_CHAT_ID }}

package/pixpilot-changesets-release/release.yml

@@ -50,15 +50,16 @@ jobs:
           provenance: 'true'
 
   notify:
-    name: Notify on Release Failure
+    name: Notify Release Status
     needs: [ci, release]
     if: always()
     runs-on: ubuntu-latest
 
     steps:
-      - name: Send Telegram notification
+      - name: Send Telegram release-status notification
         uses: pixpilot/notify-action@v1
         with:
           status: ${{ contains(needs.*.result, 'failure') && 'failure' || contains(needs.*.result, 'cancelled') && 'cancelled' || 'success' }}
+          notify-on: any
           telegram-bot-token: ${{ secrets.TELEGRAM_BOT_TOKEN }}
           telegram-chat-id: ${{ secrets.TELEGRAM_CHAT_ID }}

package/workspace-initializer/scaffoldfy.json

@@ -7,6 +7,7 @@
     "../license-file/scaffoldfy.json",
     "../update-root-package-json/scaffoldfy.json",
     "../security-policy/scaffoldfy.json",
+    "../codeql-private-repo/scaffoldfy.json",
     "../monorepo-generate-packages-section/scaffoldfy.json"
   ],
   "name": "pnpm-turbo-monorepo-template-setup",