npm - @ship.zone/ci-spec - Versions diffs - 2.0.0 - Mend

@ship.zone/ci-spec 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (116) hide show

package/conformance/ci-actions/compile-invalid/trigger-kind-without-job.yml ADDED Viewed

@@ -0,0 +1,30 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+  pullRequest:
+    targetBranches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    triggers:
+      - push
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/alias-affix-invalid.yml ADDED Viewed

@@ -0,0 +1,33 @@
+spec: 2.0.0
+on:
+  tag:
+    tags:
+      - v*
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: publish
+  npm: none
+  releaseAssets: none
+jobs:
+  image:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    build:
+      context: .
+      dockerfile: Dockerfile
+      platforms:
+        - linux/amd64
+publish:
+  images:
+    - candidate: image
+      destinations:
+        - registry: code.foss.global
+          repository: example/app
+          aliases:
+            - kind: version
+              prefix: -v
+              suffix: ":alpine"

package/conformance/ci-actions/invalid/alias.yml ADDED Viewed

@@ -0,0 +1,32 @@
+spec: 2.0.0
+on:
+  push: {}
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  lint:
+    runner: &runner
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - lint
+  test:
+    runner: *runner
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/bridge-network.yml ADDED Viewed

@@ -0,0 +1,27 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    network:
+      mode: bridge
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/build-darwin-platform.yml ADDED Viewed

@@ -0,0 +1,24 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: candidate
+  npm: none
+  releaseAssets: none
+jobs:
+  image:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    build:
+      context: .
+      dockerfile: Dockerfile
+      platforms:
+        - linux/arm64
+        - darwin/arm64

package/conformance/ci-actions/invalid/build-with-steps.yml ADDED Viewed

@@ -0,0 +1,27 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: candidate
+  npm: none
+  releaseAssets: none
+jobs:
+  image:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    build:
+      context: .
+      dockerfile: Dockerfile
+      platforms:
+        - linux/amd64
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/concurrency-empty-group.yml ADDED Viewed

@@ -0,0 +1,28 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+concurrency:
+  group: ""
+  cancelInProgress: true
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/concurrency-without-cancel-in-progress.yml ADDED Viewed

@@ -0,0 +1,27 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+concurrency:
+  group: test
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/container-job-build-profile.yml ADDED Viewed

@@ -0,0 +1,25 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/custom-tag.txt ADDED Viewed

@@ -0,0 +1,23 @@
+spec: 2.0.0
+on:
+  push: {}
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - !custom pnpm
+          - test

package/conformance/ci-actions/invalid/duplicate-key.txt ADDED Viewed

@@ -0,0 +1,24 @@
+spec: 2.0.0
+on:
+  push: {}
+permissions:
+  source: read
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/egress-bare-wildcard.yml ADDED Viewed

@@ -0,0 +1,29 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    network:
+      mode: egress
+      allow:
+        - host: "*"
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/egress-empty-allowlist.yml ADDED Viewed

@@ -0,0 +1,28 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    network:
+      mode: egress
+      allow: []
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/egress-ip-literal.yml ADDED Viewed

@@ -0,0 +1,29 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    network:
+      mode: egress
+      allow:
+        - host: 203.0.113.10
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/egress-single-label-wildcard.yml ADDED Viewed

@@ -0,0 +1,29 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    network:
+      mode: egress
+      allow:
+        - host: "*.com"
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/job-publish-permission.yml ADDED Viewed

@@ -0,0 +1,28 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: candidate
+  npm: none
+  releaseAssets: none
+jobs:
+  image:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    build:
+      context: .
+      dockerfile: Dockerfile
+      platforms:
+        - linux/amd64
+    permissions:
+      source: read
+      artifacts: none
+      caches: none
+      images: publish

package/conformance/ci-actions/invalid/job-trigger-undeclared-kind.yml ADDED Viewed

@@ -0,0 +1,27 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    triggers:
+      - tag
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/literal-alias-affix.yml ADDED Viewed

@@ -0,0 +1,33 @@
+spec: 2.0.0
+on:
+  tag:
+    tags:
+      - v*
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: publish
+  npm: none
+  releaseAssets: none
+jobs:
+  image:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    build:
+      context: .
+      dockerfile: Dockerfile
+      platforms:
+        - linux/amd64
+publish:
+  images:
+    - candidate: image
+      destinations:
+        - registry: code.foss.global
+          repository: example/app
+          aliases:
+            - kind: literal
+              value: latest
+              prefix: v

package/conformance/ci-actions/invalid/missing-spec.yml ADDED Viewed

@@ -0,0 +1,24 @@
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test

package/conformance/ci-actions/invalid/multiple-documents.yml ADDED Viewed

@@ -0,0 +1,25 @@
+spec: 2.0.0
+on:
+  push: {}
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/test@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test
+---
+spec: 2.0.0

package/conformance/ci-actions/invalid/npm-read-invalid-scope.yml ADDED Viewed

@@ -0,0 +1,33 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    network:
+      mode: egress
+      allow:
+        - host: npm.example.com
+    npmRead:
+      - registry: https://npm.example.com
+        scopes:
+          - example_private
+    steps:
+      - run:
+          - pnpm
+          - install

package/conformance/ci-actions/invalid/oci-darwin-platform.yml ADDED Viewed

@@ -0,0 +1,25 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - macos
+      platform: darwin/arm64
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - ./scripts/test.sh

package/conformance/ci-actions/invalid/permission-without-publication.yml ADDED Viewed

@@ -0,0 +1,31 @@
+spec: 2.0.0
+on:
+  tag:
+    tags:
+      - v*
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: publish
+  npm: publish
+  releaseAssets: none
+jobs:
+  image:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    build:
+      context: .
+      dockerfile: Dockerfile
+      platforms:
+        - linux/amd64
+publish:
+  images:
+    - candidate: image
+      destinations:
+        - registry: code.foss.global
+          repository: example/app
+          aliases:
+            - kind: version