@ryuenn3123/agentic-senior-core 1.9.0 → 1.9.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agent-context/blueprints/mobile-app.md +21 -21
- package/.agent-context/policies/llm-judge-threshold.json +29 -20
- package/.agent-context/profiles/platform.md +13 -13
- package/.agent-context/profiles/regulated.md +13 -13
- package/.agent-context/profiles/startup.md +13 -13
- package/.agent-context/review-checklists/frontend-skill-parity.md +28 -28
- package/.agent-context/review-checklists/frontend-usability.md +33 -33
- package/.agent-context/review-checklists/release-operations.md +29 -29
- package/.agent-context/rules/security.md +92 -0
- package/.agent-context/skills/README.md +62 -62
- package/.agent-context/skills/backend/README.md +67 -67
- package/.agent-context/skills/backend/architecture.md +360 -360
- package/.agent-context/skills/backend/data-access.md +230 -230
- package/.agent-context/skills/backend/errors.md +137 -137
- package/.agent-context/skills/backend/validation.md +116 -116
- package/.agent-context/skills/backend.md +28 -28
- package/.agent-context/skills/cli/README.md +49 -49
- package/.agent-context/skills/cli/init.md +37 -37
- package/.agent-context/skills/cli/output.md +35 -35
- package/.agent-context/skills/cli/upgrade.md +37 -37
- package/.agent-context/skills/cli.md +28 -28
- package/.agent-context/skills/distribution/README.md +18 -18
- package/.agent-context/skills/distribution/compatibility.md +31 -31
- package/.agent-context/skills/distribution/publish.md +36 -36
- package/.agent-context/skills/distribution/rollback.md +31 -31
- package/.agent-context/skills/distribution.md +28 -28
- package/.agent-context/skills/frontend/README.md +35 -35
- package/.agent-context/skills/frontend/accessibility.md +107 -107
- package/.agent-context/skills/frontend/motion.md +66 -66
- package/.agent-context/skills/frontend/performance.md +62 -62
- package/.agent-context/skills/frontend/ui-architecture.md +128 -128
- package/.agent-context/skills/frontend.md +29 -29
- package/.agent-context/skills/fullstack/README.md +18 -18
- package/.agent-context/skills/fullstack/contracts.md +52 -52
- package/.agent-context/skills/fullstack/end-to-end.md +41 -41
- package/.agent-context/skills/fullstack/feature-slicing.md +64 -64
- package/.agent-context/skills/fullstack.md +26 -26
- package/.agent-context/skills/index.json +107 -107
- package/.agent-context/skills/review-quality/README.md +18 -18
- package/.agent-context/skills/review-quality/benchmark.md +29 -29
- package/.agent-context/skills/review-quality/planning.md +37 -37
- package/.agent-context/skills/review-quality/security.md +33 -33
- package/.agent-context/skills/review-quality.md +27 -27
- package/.agent-context/stacks/flutter.md +16 -16
- package/.agent-context/stacks/react-native.md +16 -16
- package/.agent-context/state/architecture-map.md +25 -25
- package/.agent-context/state/benchmark-analysis.json +431 -431
- package/.agent-context/state/benchmark-thresholds.json +10 -10
- package/.agent-context/state/benchmark-watchlist.json +19 -19
- package/.agent-context/state/dependency-map.md +32 -32
- package/.agent-context/state/onboarding-report.json +39 -0
- package/.agent-context/state/skill-platform.json +38 -38
- package/.agent-override.md +36 -36
- package/.cursorrules +3718 -140
- package/.github/ISSUE_TEMPLATE/v1.7-frontend-work-item.yml +54 -54
- package/.github/workflows/benchmark-detection.yml +38 -38
- package/.github/workflows/benchmark-intelligence.yml +50 -50
- package/.github/workflows/frontend-usability-gate.yml +36 -36
- package/.github/workflows/publish.yml +32 -0
- package/.github/workflows/release-gate.yml +32 -32
- package/.github/workflows/sbom-compliance.yml +32 -32
- package/.windsurfrules +3718 -106
- package/AGENTS.md +181 -181
- package/README.md +318 -318
- package/bin/agentic-senior-core.js +61 -1556
- package/lib/cli/commands/init.mjs +339 -0
- package/lib/cli/commands/launch.mjs +81 -0
- package/lib/cli/commands/upgrade.mjs +165 -0
- package/lib/cli/compiler.mjs +204 -0
- package/lib/cli/constants.mjs +136 -0
- package/lib/cli/detector.mjs +211 -0
- package/lib/cli/profile-packs.mjs +94 -0
- package/lib/cli/skill-selector.mjs +210 -0
- package/lib/cli/utils.mjs +227 -0
- package/mcp.json +92 -92
- package/package.json +3 -1
- package/scripts/benchmark-gate.mjs +121 -121
- package/scripts/benchmark-intelligence.mjs +140 -140
- package/scripts/detection-benchmark.mjs +138 -138
- package/scripts/frontend-usability-audit.mjs +87 -87
- package/scripts/generate-sbom.mjs +61 -61
- package/scripts/init-project.ps1 +104 -104
- package/scripts/llm-judge.mjs +664 -664
- package/scripts/release-gate.mjs +116 -116
- package/scripts/skill-tier-policy.mjs +75 -75
- package/scripts/validate.mjs +636 -636
|
@@ -1,54 +1,54 @@
|
|
|
1
|
-
name: V1.7 Frontend Work Item
|
|
2
|
-
description: Track a V1.7 frontend task with quality-gate ready acceptance criteria.
|
|
3
|
-
title: "[V1.7][QX] "
|
|
4
|
-
labels:
|
|
5
|
-
- v1.7
|
|
6
|
-
body:
|
|
7
|
-
- type: textarea
|
|
8
|
-
id: background
|
|
9
|
-
attributes:
|
|
10
|
-
label: Background
|
|
11
|
-
description: Why this item exists and what user problem it addresses.
|
|
12
|
-
validations:
|
|
13
|
-
required: true
|
|
14
|
-
- type: textarea
|
|
15
|
-
id: scope
|
|
16
|
-
attributes:
|
|
17
|
-
label: Scope
|
|
18
|
-
description: What is included in this issue.
|
|
19
|
-
validations:
|
|
20
|
-
required: true
|
|
21
|
-
- type: textarea
|
|
22
|
-
id: out_of_scope
|
|
23
|
-
attributes:
|
|
24
|
-
label: Out of Scope
|
|
25
|
-
description: What is intentionally excluded.
|
|
26
|
-
validations:
|
|
27
|
-
required: true
|
|
28
|
-
- type: textarea
|
|
29
|
-
id: acceptance_criteria
|
|
30
|
-
attributes:
|
|
31
|
-
label: Acceptance Criteria
|
|
32
|
-
description: Use measurable and testable criteria.
|
|
33
|
-
placeholder: |
|
|
34
|
-
- [ ] ...
|
|
35
|
-
- [ ] ...
|
|
36
|
-
validations:
|
|
37
|
-
required: true
|
|
38
|
-
- type: textarea
|
|
39
|
-
id: dependencies
|
|
40
|
-
attributes:
|
|
41
|
-
label: Dependencies
|
|
42
|
-
description: Link prerequisite issues or blockers.
|
|
43
|
-
- type: textarea
|
|
44
|
-
id: definition_of_done
|
|
45
|
-
attributes:
|
|
46
|
-
label: Definition of Done
|
|
47
|
-
description: Include testing, documentation, and evidence requirements.
|
|
48
|
-
validations:
|
|
49
|
-
required: true
|
|
50
|
-
- type: textarea
|
|
51
|
-
id: evidence
|
|
52
|
-
attributes:
|
|
53
|
-
label: Evidence
|
|
54
|
-
description: Screenshots, benchmark output, links to reports.
|
|
1
|
+
name: V1.7 Frontend Work Item
|
|
2
|
+
description: Track a V1.7 frontend task with quality-gate ready acceptance criteria.
|
|
3
|
+
title: "[V1.7][QX] "
|
|
4
|
+
labels:
|
|
5
|
+
- v1.7
|
|
6
|
+
body:
|
|
7
|
+
- type: textarea
|
|
8
|
+
id: background
|
|
9
|
+
attributes:
|
|
10
|
+
label: Background
|
|
11
|
+
description: Why this item exists and what user problem it addresses.
|
|
12
|
+
validations:
|
|
13
|
+
required: true
|
|
14
|
+
- type: textarea
|
|
15
|
+
id: scope
|
|
16
|
+
attributes:
|
|
17
|
+
label: Scope
|
|
18
|
+
description: What is included in this issue.
|
|
19
|
+
validations:
|
|
20
|
+
required: true
|
|
21
|
+
- type: textarea
|
|
22
|
+
id: out_of_scope
|
|
23
|
+
attributes:
|
|
24
|
+
label: Out of Scope
|
|
25
|
+
description: What is intentionally excluded.
|
|
26
|
+
validations:
|
|
27
|
+
required: true
|
|
28
|
+
- type: textarea
|
|
29
|
+
id: acceptance_criteria
|
|
30
|
+
attributes:
|
|
31
|
+
label: Acceptance Criteria
|
|
32
|
+
description: Use measurable and testable criteria.
|
|
33
|
+
placeholder: |
|
|
34
|
+
- [ ] ...
|
|
35
|
+
- [ ] ...
|
|
36
|
+
validations:
|
|
37
|
+
required: true
|
|
38
|
+
- type: textarea
|
|
39
|
+
id: dependencies
|
|
40
|
+
attributes:
|
|
41
|
+
label: Dependencies
|
|
42
|
+
description: Link prerequisite issues or blockers.
|
|
43
|
+
- type: textarea
|
|
44
|
+
id: definition_of_done
|
|
45
|
+
attributes:
|
|
46
|
+
label: Definition of Done
|
|
47
|
+
description: Include testing, documentation, and evidence requirements.
|
|
48
|
+
validations:
|
|
49
|
+
required: true
|
|
50
|
+
- type: textarea
|
|
51
|
+
id: evidence
|
|
52
|
+
attributes:
|
|
53
|
+
label: Evidence
|
|
54
|
+
description: Screenshots, benchmark output, links to reports.
|
|
@@ -1,38 +1,38 @@
|
|
|
1
|
-
name: Detection Benchmark
|
|
2
|
-
|
|
3
|
-
on:
|
|
4
|
-
push:
|
|
5
|
-
branches:
|
|
6
|
-
- '**'
|
|
7
|
-
pull_request:
|
|
8
|
-
workflow_dispatch:
|
|
9
|
-
|
|
10
|
-
permissions:
|
|
11
|
-
contents: read
|
|
12
|
-
|
|
13
|
-
jobs:
|
|
14
|
-
benchmark-detection:
|
|
15
|
-
runs-on: ubuntu-latest
|
|
16
|
-
timeout-minutes: 10
|
|
17
|
-
env:
|
|
18
|
-
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
|
|
19
|
-
steps:
|
|
20
|
-
- name: Checkout repository
|
|
21
|
-
uses: actions/checkout@v4
|
|
22
|
-
|
|
23
|
-
- name: Setup Node.js
|
|
24
|
-
uses: actions/setup-node@v4
|
|
25
|
-
with:
|
|
26
|
-
node-version: '22'
|
|
27
|
-
|
|
28
|
-
- name: Run detection benchmark
|
|
29
|
-
run: |
|
|
30
|
-
node ./scripts/detection-benchmark.mjs > detection-benchmark-report.json
|
|
31
|
-
test -s detection-benchmark-report.json
|
|
32
|
-
|
|
33
|
-
- name: Upload benchmark artifact
|
|
34
|
-
if: always()
|
|
35
|
-
uses: actions/upload-artifact@v4
|
|
36
|
-
with:
|
|
37
|
-
name: detection-benchmark-report
|
|
38
|
-
path: detection-benchmark-report.json
|
|
1
|
+
name: Detection Benchmark
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
push:
|
|
5
|
+
branches:
|
|
6
|
+
- '**'
|
|
7
|
+
pull_request:
|
|
8
|
+
workflow_dispatch:
|
|
9
|
+
|
|
10
|
+
permissions:
|
|
11
|
+
contents: read
|
|
12
|
+
|
|
13
|
+
jobs:
|
|
14
|
+
benchmark-detection:
|
|
15
|
+
runs-on: ubuntu-latest
|
|
16
|
+
timeout-minutes: 10
|
|
17
|
+
env:
|
|
18
|
+
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
|
|
19
|
+
steps:
|
|
20
|
+
- name: Checkout repository
|
|
21
|
+
uses: actions/checkout@v4
|
|
22
|
+
|
|
23
|
+
- name: Setup Node.js
|
|
24
|
+
uses: actions/setup-node@v4
|
|
25
|
+
with:
|
|
26
|
+
node-version: '22'
|
|
27
|
+
|
|
28
|
+
- name: Run detection benchmark
|
|
29
|
+
run: |
|
|
30
|
+
node ./scripts/detection-benchmark.mjs > detection-benchmark-report.json
|
|
31
|
+
test -s detection-benchmark-report.json
|
|
32
|
+
|
|
33
|
+
- name: Upload benchmark artifact
|
|
34
|
+
if: always()
|
|
35
|
+
uses: actions/upload-artifact@v4
|
|
36
|
+
with:
|
|
37
|
+
name: detection-benchmark-report
|
|
38
|
+
path: detection-benchmark-report.json
|
|
@@ -1,50 +1,50 @@
|
|
|
1
|
-
name: Benchmark Intelligence
|
|
2
|
-
|
|
3
|
-
on:
|
|
4
|
-
schedule:
|
|
5
|
-
- cron: '0 2 * * 1'
|
|
6
|
-
pull_request:
|
|
7
|
-
workflow_dispatch:
|
|
8
|
-
|
|
9
|
-
permissions:
|
|
10
|
-
contents: read
|
|
11
|
-
|
|
12
|
-
jobs:
|
|
13
|
-
benchmark-intelligence:
|
|
14
|
-
runs-on: ubuntu-latest
|
|
15
|
-
timeout-minutes: 10
|
|
16
|
-
env:
|
|
17
|
-
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
|
|
18
|
-
steps:
|
|
19
|
-
- name: Checkout repository
|
|
20
|
-
uses: actions/checkout@v4
|
|
21
|
-
|
|
22
|
-
- name: Setup Node.js
|
|
23
|
-
uses: actions/setup-node@v4
|
|
24
|
-
with:
|
|
25
|
-
node-version: '22'
|
|
26
|
-
|
|
27
|
-
- name: Run benchmark detection report
|
|
28
|
-
run: |
|
|
29
|
-
node ./scripts/detection-benchmark.mjs > detection-benchmark-report.json
|
|
30
|
-
test -s detection-benchmark-report.json
|
|
31
|
-
|
|
32
|
-
- name: Run benchmark anti-regression gate
|
|
33
|
-
run: |
|
|
34
|
-
node ./scripts/benchmark-gate.mjs > benchmark-gate-report.json
|
|
35
|
-
test -s benchmark-gate-report.json
|
|
36
|
-
|
|
37
|
-
- name: Run benchmark intelligence report
|
|
38
|
-
run: |
|
|
39
|
-
node ./scripts/benchmark-intelligence.mjs > benchmark-intelligence-report.json
|
|
40
|
-
test -s benchmark-intelligence-report.json
|
|
41
|
-
|
|
42
|
-
- name: Upload benchmark artifacts
|
|
43
|
-
if: always()
|
|
44
|
-
uses: actions/upload-artifact@v4
|
|
45
|
-
with:
|
|
46
|
-
name: benchmark-intelligence-report
|
|
47
|
-
path: |
|
|
48
|
-
detection-benchmark-report.json
|
|
49
|
-
benchmark-gate-report.json
|
|
50
|
-
benchmark-intelligence-report.json
|
|
1
|
+
name: Benchmark Intelligence
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
schedule:
|
|
5
|
+
- cron: '0 2 * * 1'
|
|
6
|
+
pull_request:
|
|
7
|
+
workflow_dispatch:
|
|
8
|
+
|
|
9
|
+
permissions:
|
|
10
|
+
contents: read
|
|
11
|
+
|
|
12
|
+
jobs:
|
|
13
|
+
benchmark-intelligence:
|
|
14
|
+
runs-on: ubuntu-latest
|
|
15
|
+
timeout-minutes: 10
|
|
16
|
+
env:
|
|
17
|
+
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
|
|
18
|
+
steps:
|
|
19
|
+
- name: Checkout repository
|
|
20
|
+
uses: actions/checkout@v4
|
|
21
|
+
|
|
22
|
+
- name: Setup Node.js
|
|
23
|
+
uses: actions/setup-node@v4
|
|
24
|
+
with:
|
|
25
|
+
node-version: '22'
|
|
26
|
+
|
|
27
|
+
- name: Run benchmark detection report
|
|
28
|
+
run: |
|
|
29
|
+
node ./scripts/detection-benchmark.mjs > detection-benchmark-report.json
|
|
30
|
+
test -s detection-benchmark-report.json
|
|
31
|
+
|
|
32
|
+
- name: Run benchmark anti-regression gate
|
|
33
|
+
run: |
|
|
34
|
+
node ./scripts/benchmark-gate.mjs > benchmark-gate-report.json
|
|
35
|
+
test -s benchmark-gate-report.json
|
|
36
|
+
|
|
37
|
+
- name: Run benchmark intelligence report
|
|
38
|
+
run: |
|
|
39
|
+
node ./scripts/benchmark-intelligence.mjs > benchmark-intelligence-report.json
|
|
40
|
+
test -s benchmark-intelligence-report.json
|
|
41
|
+
|
|
42
|
+
- name: Upload benchmark artifacts
|
|
43
|
+
if: always()
|
|
44
|
+
uses: actions/upload-artifact@v4
|
|
45
|
+
with:
|
|
46
|
+
name: benchmark-intelligence-report
|
|
47
|
+
path: |
|
|
48
|
+
detection-benchmark-report.json
|
|
49
|
+
benchmark-gate-report.json
|
|
50
|
+
benchmark-intelligence-report.json
|
|
@@ -1,36 +1,36 @@
|
|
|
1
|
-
name: Frontend Usability Gate
|
|
2
|
-
|
|
3
|
-
on:
|
|
4
|
-
push:
|
|
5
|
-
branches:
|
|
6
|
-
- '**'
|
|
7
|
-
pull_request:
|
|
8
|
-
workflow_dispatch:
|
|
9
|
-
|
|
10
|
-
permissions:
|
|
11
|
-
contents: read
|
|
12
|
-
|
|
13
|
-
jobs:
|
|
14
|
-
frontend-usability-audit:
|
|
15
|
-
runs-on: ubuntu-latest
|
|
16
|
-
timeout-minutes: 10
|
|
17
|
-
env:
|
|
18
|
-
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
|
|
19
|
-
steps:
|
|
20
|
-
- name: Checkout repository
|
|
21
|
-
uses: actions/checkout@v4
|
|
22
|
-
|
|
23
|
-
- name: Setup Node.js
|
|
24
|
-
uses: actions/setup-node@v4
|
|
25
|
-
with:
|
|
26
|
-
node-version: '22'
|
|
27
|
-
|
|
28
|
-
- name: Run frontend usability audit
|
|
29
|
-
run: node ./scripts/frontend-usability-audit.mjs > frontend-usability-audit-report.json
|
|
30
|
-
|
|
31
|
-
- name: Upload frontend audit artifact
|
|
32
|
-
if: always()
|
|
33
|
-
uses: actions/upload-artifact@v4
|
|
34
|
-
with:
|
|
35
|
-
name: frontend-usability-audit-report
|
|
36
|
-
path: frontend-usability-audit-report.json
|
|
1
|
+
name: Frontend Usability Gate
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
push:
|
|
5
|
+
branches:
|
|
6
|
+
- '**'
|
|
7
|
+
pull_request:
|
|
8
|
+
workflow_dispatch:
|
|
9
|
+
|
|
10
|
+
permissions:
|
|
11
|
+
contents: read
|
|
12
|
+
|
|
13
|
+
jobs:
|
|
14
|
+
frontend-usability-audit:
|
|
15
|
+
runs-on: ubuntu-latest
|
|
16
|
+
timeout-minutes: 10
|
|
17
|
+
env:
|
|
18
|
+
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
|
|
19
|
+
steps:
|
|
20
|
+
- name: Checkout repository
|
|
21
|
+
uses: actions/checkout@v4
|
|
22
|
+
|
|
23
|
+
- name: Setup Node.js
|
|
24
|
+
uses: actions/setup-node@v4
|
|
25
|
+
with:
|
|
26
|
+
node-version: '22'
|
|
27
|
+
|
|
28
|
+
- name: Run frontend usability audit
|
|
29
|
+
run: node ./scripts/frontend-usability-audit.mjs > frontend-usability-audit-report.json
|
|
30
|
+
|
|
31
|
+
- name: Upload frontend audit artifact
|
|
32
|
+
if: always()
|
|
33
|
+
uses: actions/upload-artifact@v4
|
|
34
|
+
with:
|
|
35
|
+
name: frontend-usability-audit-report
|
|
36
|
+
path: frontend-usability-audit-report.json
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
name: publish-to-npm
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
push:
|
|
5
|
+
branches:
|
|
6
|
+
- main
|
|
7
|
+
|
|
8
|
+
jobs:
|
|
9
|
+
publish:
|
|
10
|
+
runs-on: ubuntu-latest
|
|
11
|
+
steps:
|
|
12
|
+
- name: Checkout repository
|
|
13
|
+
uses: actions/checkout@v4
|
|
14
|
+
|
|
15
|
+
- name: Setup Node.js
|
|
16
|
+
uses: actions/setup-node@v4
|
|
17
|
+
with:
|
|
18
|
+
node-version: 24
|
|
19
|
+
registry-url: 'https://registry.npmjs.org'
|
|
20
|
+
|
|
21
|
+
- name: Install dependencies
|
|
22
|
+
run: npm install
|
|
23
|
+
|
|
24
|
+
- name: Run verification
|
|
25
|
+
run: |
|
|
26
|
+
npm run validate
|
|
27
|
+
npm test
|
|
28
|
+
|
|
29
|
+
- name: Publish to NPM
|
|
30
|
+
run: npm publish --access public
|
|
31
|
+
env:
|
|
32
|
+
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
@@ -1,32 +1,32 @@
|
|
|
1
|
-
name: release-gate
|
|
2
|
-
|
|
3
|
-
on:
|
|
4
|
-
push:
|
|
5
|
-
branches:
|
|
6
|
-
- main
|
|
7
|
-
pull_request:
|
|
8
|
-
workflow_dispatch:
|
|
9
|
-
|
|
10
|
-
permissions:
|
|
11
|
-
contents: read
|
|
12
|
-
|
|
13
|
-
jobs:
|
|
14
|
-
release-gate:
|
|
15
|
-
runs-on: ubuntu-latest
|
|
16
|
-
steps:
|
|
17
|
-
- name: Checkout repository
|
|
18
|
-
uses: actions/checkout@v4
|
|
19
|
-
|
|
20
|
-
- name: Setup Node.js
|
|
21
|
-
uses: actions/setup-node@v4
|
|
22
|
-
with:
|
|
23
|
-
node-version: 24
|
|
24
|
-
|
|
25
|
-
- name: Run release gate
|
|
26
|
-
run: node ./scripts/release-gate.mjs > release-gate-report.json
|
|
27
|
-
|
|
28
|
-
- name: Upload release gate report artifact
|
|
29
|
-
uses: actions/upload-artifact@v4
|
|
30
|
-
with:
|
|
31
|
-
name: release-gate-report
|
|
32
|
-
path: release-gate-report.json
|
|
1
|
+
name: release-gate
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
push:
|
|
5
|
+
branches:
|
|
6
|
+
- main
|
|
7
|
+
pull_request:
|
|
8
|
+
workflow_dispatch:
|
|
9
|
+
|
|
10
|
+
permissions:
|
|
11
|
+
contents: read
|
|
12
|
+
|
|
13
|
+
jobs:
|
|
14
|
+
release-gate:
|
|
15
|
+
runs-on: ubuntu-latest
|
|
16
|
+
steps:
|
|
17
|
+
- name: Checkout repository
|
|
18
|
+
uses: actions/checkout@v4
|
|
19
|
+
|
|
20
|
+
- name: Setup Node.js
|
|
21
|
+
uses: actions/setup-node@v4
|
|
22
|
+
with:
|
|
23
|
+
node-version: 24
|
|
24
|
+
|
|
25
|
+
- name: Run release gate
|
|
26
|
+
run: node ./scripts/release-gate.mjs > release-gate-report.json
|
|
27
|
+
|
|
28
|
+
- name: Upload release gate report artifact
|
|
29
|
+
uses: actions/upload-artifact@v4
|
|
30
|
+
with:
|
|
31
|
+
name: release-gate-report
|
|
32
|
+
path: release-gate-report.json
|
|
@@ -1,32 +1,32 @@
|
|
|
1
|
-
name: sbom-compliance
|
|
2
|
-
|
|
3
|
-
on:
|
|
4
|
-
push:
|
|
5
|
-
branches:
|
|
6
|
-
- main
|
|
7
|
-
pull_request:
|
|
8
|
-
workflow_dispatch:
|
|
9
|
-
|
|
10
|
-
permissions:
|
|
11
|
-
contents: read
|
|
12
|
-
|
|
13
|
-
jobs:
|
|
14
|
-
generate-sbom:
|
|
15
|
-
runs-on: ubuntu-latest
|
|
16
|
-
steps:
|
|
17
|
-
- name: Checkout repository
|
|
18
|
-
uses: actions/checkout@v4
|
|
19
|
-
|
|
20
|
-
- name: Setup Node.js
|
|
21
|
-
uses: actions/setup-node@v4
|
|
22
|
-
with:
|
|
23
|
-
node-version: 24
|
|
24
|
-
|
|
25
|
-
- name: Generate CycloneDX SBOM
|
|
26
|
-
run: node ./scripts/generate-sbom.mjs > sbom.cdx.json
|
|
27
|
-
|
|
28
|
-
- name: Upload SBOM artifact
|
|
29
|
-
uses: actions/upload-artifact@v4
|
|
30
|
-
with:
|
|
31
|
-
name: sbom-cyclonedx
|
|
32
|
-
path: sbom.cdx.json
|
|
1
|
+
name: sbom-compliance
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
push:
|
|
5
|
+
branches:
|
|
6
|
+
- main
|
|
7
|
+
pull_request:
|
|
8
|
+
workflow_dispatch:
|
|
9
|
+
|
|
10
|
+
permissions:
|
|
11
|
+
contents: read
|
|
12
|
+
|
|
13
|
+
jobs:
|
|
14
|
+
generate-sbom:
|
|
15
|
+
runs-on: ubuntu-latest
|
|
16
|
+
steps:
|
|
17
|
+
- name: Checkout repository
|
|
18
|
+
uses: actions/checkout@v4
|
|
19
|
+
|
|
20
|
+
- name: Setup Node.js
|
|
21
|
+
uses: actions/setup-node@v4
|
|
22
|
+
with:
|
|
23
|
+
node-version: 24
|
|
24
|
+
|
|
25
|
+
- name: Generate CycloneDX SBOM
|
|
26
|
+
run: node ./scripts/generate-sbom.mjs > sbom.cdx.json
|
|
27
|
+
|
|
28
|
+
- name: Upload SBOM artifact
|
|
29
|
+
uses: actions/upload-artifact@v4
|
|
30
|
+
with:
|
|
31
|
+
name: sbom-cyclonedx
|
|
32
|
+
path: sbom.cdx.json
|