@tarsilla/commit-wizard 1.1.2 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +7 -7
- package/src/github-actions/code-analysis/base/codeql/action.yml +0 -30
- package/src/github-actions/code-analysis/base/owasp/action.yml +0 -30
- package/src/github-actions/code-analysis/base/owasp/owasp/Dockerfile +0 -5
- package/src/github-actions/code-analysis/base/owasp/owasp/action.yml +0 -23
- package/src/github-actions/code-analysis/base/owasp/owasp/entrypoint.sh +0 -19
- package/src/github-actions/code-analysis/base/snyk/code-test/node/action.yml +0 -15
- package/src/github-actions/code-analysis/base/snyk/test/node/action.yml +0 -24
- package/src/github-actions/code-analysis/node/codeql/action.yml +0 -19
- package/src/github-actions/code-analysis/node/owasp/action.yml +0 -24
- package/src/github-actions/code-analysis/node/snyk/code-test/action.yml +0 -20
- package/src/github-actions/code-analysis/node/snyk/test/action.yml +0 -21
- package/src/github-actions/deploy/github-pages/base/action.yml +0 -38
- package/src/github-actions/deploy/github-pages/storybook/action.yml +0 -31
- package/src/github-actions/publish/npm/action.yml +0 -28
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@tarsilla/commit-wizard",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.2.0",
|
|
4
4
|
"publishConfig": {
|
|
5
5
|
"access": "public"
|
|
6
6
|
},
|
|
@@ -58,24 +58,24 @@
|
|
|
58
58
|
"inquirer": "^8.2.6"
|
|
59
59
|
},
|
|
60
60
|
"devDependencies": {
|
|
61
|
-
"@eslint/js": "^9.
|
|
61
|
+
"@eslint/js": "^9.23.0",
|
|
62
62
|
"@rollup/plugin-commonjs": "^28.0.3",
|
|
63
63
|
"@rollup/plugin-node-resolve": "^16.0.1",
|
|
64
64
|
"@rollup/plugin-swc": "^0.4.0",
|
|
65
65
|
"@rollup/plugin-terser": "^0.4.4",
|
|
66
66
|
"@types/inquirer": "^8.2.10",
|
|
67
|
-
"eslint": "^9.
|
|
67
|
+
"eslint": "^9.23.0",
|
|
68
68
|
"eslint-config-prettier": "^10.1.1",
|
|
69
|
-
"eslint-import-resolver-typescript": "^4.
|
|
69
|
+
"eslint-import-resolver-typescript": "^4.3.1",
|
|
70
70
|
"eslint-plugin-import": "^2.31.0",
|
|
71
|
-
"eslint-plugin-prettier": "^5.2.
|
|
71
|
+
"eslint-plugin-prettier": "^5.2.5",
|
|
72
72
|
"eslint-plugin-unused-imports": "^4.1.4",
|
|
73
73
|
"husky": "^9.1.7",
|
|
74
74
|
"prettier": "^3.5.3",
|
|
75
|
-
"rollup": "^4.
|
|
75
|
+
"rollup": "^4.38.0",
|
|
76
76
|
"rollup-plugin-dts": "^6.2.1",
|
|
77
77
|
"rollup-plugin-peer-deps-external": "^2.2.4",
|
|
78
78
|
"typescript": "^5.8.2",
|
|
79
|
-
"typescript-eslint": "^8.
|
|
79
|
+
"typescript-eslint": "^8.29.0"
|
|
80
80
|
}
|
|
81
81
|
}
|
|
@@ -1,30 +0,0 @@
|
|
|
1
|
-
name: CodeQL Analyze
|
|
2
|
-
description: Github action to execute CodeQL analyze as part of a github workflow
|
|
3
|
-
inputs:
|
|
4
|
-
language:
|
|
5
|
-
required: true
|
|
6
|
-
build-mode:
|
|
7
|
-
required: true
|
|
8
|
-
out:
|
|
9
|
-
required: true
|
|
10
|
-
default: reports
|
|
11
|
-
runs:
|
|
12
|
-
#permissions:
|
|
13
|
-
# security-events: write # to be set in workflow run
|
|
14
|
-
using: composite
|
|
15
|
-
steps:
|
|
16
|
-
- name: Initialize CodeQL
|
|
17
|
-
uses: github/codeql-action/init@v3
|
|
18
|
-
with:
|
|
19
|
-
languages: ${{ inputs.language }}
|
|
20
|
-
build-mode: ${{ inputs.build-mode }}
|
|
21
|
-
- name: Run CodeQL Analysis
|
|
22
|
-
uses: github/codeql-action/analyze@v3
|
|
23
|
-
with:
|
|
24
|
-
category: /language:${{ inputs.language }}
|
|
25
|
-
output: ${{ github.workspace }}/${{ inputs.out }}/codeql-results.sarif
|
|
26
|
-
- name: Upload CodeQL report
|
|
27
|
-
uses: actions/upload-artifact@master
|
|
28
|
-
with:
|
|
29
|
-
name: CodeQL report
|
|
30
|
-
path: ${{ github.workspace }}/${{ inputs.out }}
|
|
@@ -1,30 +0,0 @@
|
|
|
1
|
-
name: OWASP Dependency-Check
|
|
2
|
-
description: Github action to execute OWASP dependency check as part of a github workflow
|
|
3
|
-
inputs:
|
|
4
|
-
project:
|
|
5
|
-
required: true
|
|
6
|
-
path:
|
|
7
|
-
required: true
|
|
8
|
-
format:
|
|
9
|
-
required: true
|
|
10
|
-
out:
|
|
11
|
-
required: true
|
|
12
|
-
default: reports
|
|
13
|
-
suppression:
|
|
14
|
-
required: false
|
|
15
|
-
runs:
|
|
16
|
-
using: composite
|
|
17
|
-
steps:
|
|
18
|
-
- name: Run OWASP Dependency-Check
|
|
19
|
-
uses: ./src/github-actions/code-analysis/base/owasp/owasp
|
|
20
|
-
with:
|
|
21
|
-
project: ${{ inputs.project }}
|
|
22
|
-
path: ${{ inputs.path }}
|
|
23
|
-
format: ${{ inputs.format }}
|
|
24
|
-
out: ${{ inputs.out }}
|
|
25
|
-
suppression: ${{ inputs.suppression }}
|
|
26
|
-
- name: Upload OWASP report
|
|
27
|
-
uses: actions/upload-artifact@master
|
|
28
|
-
with:
|
|
29
|
-
name: OWASP report
|
|
30
|
-
path: ${{ github.workspace }}/${{ inputs.out }}
|
|
@@ -1,23 +0,0 @@
|
|
|
1
|
-
name: OWASP Dependency-Check
|
|
2
|
-
description: Github action to execute OWASP dependency check as part of a github workflow
|
|
3
|
-
inputs:
|
|
4
|
-
project:
|
|
5
|
-
required: true
|
|
6
|
-
path:
|
|
7
|
-
required: true
|
|
8
|
-
format:
|
|
9
|
-
required: true
|
|
10
|
-
out:
|
|
11
|
-
required: true
|
|
12
|
-
default: reports
|
|
13
|
-
suppression:
|
|
14
|
-
required: false
|
|
15
|
-
runs:
|
|
16
|
-
using: docker
|
|
17
|
-
image: Dockerfile
|
|
18
|
-
args:
|
|
19
|
-
- ${{ inputs.project }}
|
|
20
|
-
- ${{ inputs.path }}
|
|
21
|
-
- ${{ inputs.format }}
|
|
22
|
-
- ${{ inputs.out }}
|
|
23
|
-
- ${{ inputs.suppression }}
|
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
#!/bin/bash
|
|
2
|
-
set -e
|
|
3
|
-
|
|
4
|
-
# Build base command array.
|
|
5
|
-
args=(--project "${INPUT_PROJECT}" \
|
|
6
|
-
--scan "$GITHUB_WORKSPACE/${INPUT_PATH}" \
|
|
7
|
-
--format "${INPUT_FORMAT}" \
|
|
8
|
-
--out "$GITHUB_WORKSPACE/${INPUT_OUT}" \
|
|
9
|
-
--noupdate \
|
|
10
|
-
--enableRetired \
|
|
11
|
-
--failOnCVSS 7)
|
|
12
|
-
|
|
13
|
-
# If the suppression boolean is true, append the flag.
|
|
14
|
-
if [ "${INPUT_SUPPRESSION}" = "true" ]; then
|
|
15
|
-
args+=(--suppression suppressions.xml)
|
|
16
|
-
fi
|
|
17
|
-
|
|
18
|
-
# Execute OWASP Dependency-Check with the built arguments.
|
|
19
|
-
/usr/share/dependency-check/bin/dependency-check.sh ${args[@]}
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
name: Snyk Code Test
|
|
2
|
-
description: Github action to execute Snyk code test as part of a github workflow
|
|
3
|
-
inputs:
|
|
4
|
-
token:
|
|
5
|
-
required: true
|
|
6
|
-
runs:
|
|
7
|
-
using: composite
|
|
8
|
-
steps:
|
|
9
|
-
- name: Run Snyk Code Test
|
|
10
|
-
uses: snyk/actions/node@master
|
|
11
|
-
with:
|
|
12
|
-
command: code test
|
|
13
|
-
args: --severity-threshold=high
|
|
14
|
-
env:
|
|
15
|
-
SNYK_TOKEN: ${{ inputs.token }}
|
|
@@ -1,24 +0,0 @@
|
|
|
1
|
-
name: Snyk Test
|
|
2
|
-
description: Github action to execute Snyk test as part of a github workflow
|
|
3
|
-
inputs:
|
|
4
|
-
project:
|
|
5
|
-
required: true
|
|
6
|
-
token:
|
|
7
|
-
required: true
|
|
8
|
-
runs:
|
|
9
|
-
using: composite
|
|
10
|
-
steps:
|
|
11
|
-
- name: Run Snyk Test
|
|
12
|
-
uses: snyk/actions/node@master
|
|
13
|
-
env:
|
|
14
|
-
SNYK_TOKEN: ${{ inputs.token }}
|
|
15
|
-
with:
|
|
16
|
-
command: test
|
|
17
|
-
args: --severity-threshold=high
|
|
18
|
-
- name: Run Snyk Monitor
|
|
19
|
-
uses: snyk/actions/node@master
|
|
20
|
-
with:
|
|
21
|
-
command: monitor
|
|
22
|
-
args: --project-name="${{ inputs.project }}"
|
|
23
|
-
env:
|
|
24
|
-
SNYK_TOKEN: ${{ inputs.token }}
|
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
name: OWASP Dependency-Check
|
|
2
|
-
description: Github action to execute OWASP dependency check as part of a github workflow for NodeJS projects
|
|
3
|
-
runs:
|
|
4
|
-
using: composite
|
|
5
|
-
steps:
|
|
6
|
-
- name: Setup Node.js
|
|
7
|
-
uses: actions/setup-node@v4
|
|
8
|
-
with:
|
|
9
|
-
node-version: 22.x
|
|
10
|
-
registry-url: https://registry.npmjs.org
|
|
11
|
-
- name: Install dependencies
|
|
12
|
-
run: npm ci
|
|
13
|
-
shell: bash
|
|
14
|
-
- name: Run CodeQL Analysis
|
|
15
|
-
uses: ./src/github-actions/code-analysis/base/codeql
|
|
16
|
-
with:
|
|
17
|
-
language: javascript-typescript
|
|
18
|
-
build-mode: none
|
|
19
|
-
out: reports
|
|
@@ -1,24 +0,0 @@
|
|
|
1
|
-
name: OWASP Dependency-Check
|
|
2
|
-
description: Github action to execute OWASP dependency check as part of a github workflow for NodeJS projects
|
|
3
|
-
inputs:
|
|
4
|
-
suppression:
|
|
5
|
-
required: false
|
|
6
|
-
runs:
|
|
7
|
-
using: composite
|
|
8
|
-
steps:
|
|
9
|
-
- name: Setup Node.js
|
|
10
|
-
uses: actions/setup-node@v4
|
|
11
|
-
with:
|
|
12
|
-
node-version: 22.x
|
|
13
|
-
registry-url: https://registry.npmjs.org
|
|
14
|
-
- name: Install dependencies
|
|
15
|
-
run: npm ci
|
|
16
|
-
shell: bash
|
|
17
|
-
- name: Run OWASP Dependency-Check
|
|
18
|
-
uses: ./src/github-actions/code-analysis/base/owasp
|
|
19
|
-
with:
|
|
20
|
-
project: ${{ github.repository }}
|
|
21
|
-
path: .
|
|
22
|
-
format: HTML
|
|
23
|
-
out: reports
|
|
24
|
-
suppression: ${{ inputs.suppression }}
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
name: Snyk Test
|
|
2
|
-
description: Github action to execute Snyk test as part of a github workflow for NodeJS projects
|
|
3
|
-
inputs:
|
|
4
|
-
token:
|
|
5
|
-
required: true
|
|
6
|
-
runs:
|
|
7
|
-
using: composite
|
|
8
|
-
steps:
|
|
9
|
-
- name: Setup Node.js
|
|
10
|
-
uses: actions/setup-node@v4
|
|
11
|
-
with:
|
|
12
|
-
node-version: 22.x
|
|
13
|
-
registry-url: https://registry.npmjs.org
|
|
14
|
-
- name: Install dependencies
|
|
15
|
-
run: npm ci
|
|
16
|
-
shell: bash
|
|
17
|
-
- name: Run Snyk Code Test
|
|
18
|
-
uses: ./src/github-actions/code-analysis/base/snyk/code-test/node
|
|
19
|
-
with:
|
|
20
|
-
token: ${{ inputs.token }}
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
name: Snyk Test
|
|
2
|
-
description: Github action to execute Snyk test as part of a github workflow for NodeJS projects
|
|
3
|
-
inputs:
|
|
4
|
-
token:
|
|
5
|
-
required: true
|
|
6
|
-
runs:
|
|
7
|
-
using: composite
|
|
8
|
-
steps:
|
|
9
|
-
- name: Setup Node.js
|
|
10
|
-
uses: actions/setup-node@v4
|
|
11
|
-
with:
|
|
12
|
-
node-version: 22.x
|
|
13
|
-
registry-url: https://registry.npmjs.org
|
|
14
|
-
- name: Install dependencies
|
|
15
|
-
run: npm ci
|
|
16
|
-
shell: bash
|
|
17
|
-
- name: Run Snyk Test
|
|
18
|
-
uses: ./src/github-actions/code-analysis/base/snyk/test/node
|
|
19
|
-
with:
|
|
20
|
-
project: ${{ github.repository }}
|
|
21
|
-
token: ${{ inputs.token }}
|
|
@@ -1,38 +0,0 @@
|
|
|
1
|
-
name: Deploy to Github Pages
|
|
2
|
-
description: Github action to deploy to github pages as part of a github workflow for NodeJS projects
|
|
3
|
-
inputs:
|
|
4
|
-
path:
|
|
5
|
-
description: Specifies the path of the static assets after building
|
|
6
|
-
required: true
|
|
7
|
-
install:
|
|
8
|
-
description: Specifies the command to run the installation.
|
|
9
|
-
required: true
|
|
10
|
-
build:
|
|
11
|
-
description: Specifies the command to run after install for the build
|
|
12
|
-
required: true
|
|
13
|
-
outputs:
|
|
14
|
-
page_url:
|
|
15
|
-
description: The URL of the page
|
|
16
|
-
value: ${{ steps.deploy.outputs.page_url }}
|
|
17
|
-
runs:
|
|
18
|
-
#permissions:
|
|
19
|
-
# contents: read # to be set in workflow run
|
|
20
|
-
# pages: write # to be set in workflow run
|
|
21
|
-
# id-token: write # to be set in workflow run
|
|
22
|
-
using: composite
|
|
23
|
-
steps:
|
|
24
|
-
- name: Install
|
|
25
|
-
shell: bash
|
|
26
|
-
run: ${{ inputs.install_command }}
|
|
27
|
-
- name: Build
|
|
28
|
-
shell: bash
|
|
29
|
-
run: ${{ inputs.build }}
|
|
30
|
-
- name: Upload files
|
|
31
|
-
uses: actions/upload-pages-artifact@v3
|
|
32
|
-
with:
|
|
33
|
-
path: ${{ inputs.path }}
|
|
34
|
-
- id: deploy
|
|
35
|
-
name: Deploy to GitHub Pages
|
|
36
|
-
uses: actions/deploy-pages@v4
|
|
37
|
-
with:
|
|
38
|
-
token: ${{ github.token }}
|
|
@@ -1,31 +0,0 @@
|
|
|
1
|
-
name: Deploy Storybook to Github Pages
|
|
2
|
-
description: Github action to deploy storybook to github pages as part of a github workflow for NodeJS projects
|
|
3
|
-
inputs:
|
|
4
|
-
path:
|
|
5
|
-
description: Specifies the path of the static assets after building
|
|
6
|
-
required: true
|
|
7
|
-
install:
|
|
8
|
-
description: Specifies the command to run the installation.
|
|
9
|
-
required: true
|
|
10
|
-
build:
|
|
11
|
-
description: Specifies the command to run after install for the build
|
|
12
|
-
required: true
|
|
13
|
-
outputs:
|
|
14
|
-
page_url:
|
|
15
|
-
description: The URL of the page
|
|
16
|
-
value: ${{ steps.deploy.outputs.page_url }}
|
|
17
|
-
runs:
|
|
18
|
-
using: composite
|
|
19
|
-
steps:
|
|
20
|
-
- name: Setup Node.js
|
|
21
|
-
uses: actions/setup-node@v4
|
|
22
|
-
with:
|
|
23
|
-
node-version: 22.x
|
|
24
|
-
registry-url: https://registry.npmjs.org
|
|
25
|
-
- id: deploy
|
|
26
|
-
name: Deploy Storybook to Github Pages
|
|
27
|
-
uses: ./src/github-actions/deploy/github-pages/base
|
|
28
|
-
with:
|
|
29
|
-
path: storybook-static
|
|
30
|
-
install: npm ci
|
|
31
|
-
build: npm run build-storybook
|
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
name: NPM Publish
|
|
2
|
-
description: Github action to publish to npm as part of a github workflow for NodeJS projects
|
|
3
|
-
inputs:
|
|
4
|
-
token:
|
|
5
|
-
required: true
|
|
6
|
-
runs:
|
|
7
|
-
#permissions:
|
|
8
|
-
# contents: write # to be set in workflow run
|
|
9
|
-
# id-token: write # to be set in workflow run
|
|
10
|
-
using: composite
|
|
11
|
-
steps:
|
|
12
|
-
- name: Setup Node.js
|
|
13
|
-
uses: actions/setup-node@v4
|
|
14
|
-
with:
|
|
15
|
-
node-version: 22.x
|
|
16
|
-
registry-url: https://registry.npmjs.org
|
|
17
|
-
- name: Install dependencies
|
|
18
|
-
shell: bash
|
|
19
|
-
run: npm ci
|
|
20
|
-
- name: Build
|
|
21
|
-
shell: bash
|
|
22
|
-
run: npm run build
|
|
23
|
-
- name: Publish to NPM
|
|
24
|
-
shell: bash
|
|
25
|
-
run: npx semantic-release
|
|
26
|
-
env:
|
|
27
|
-
GITHUB_TOKEN: ${{ github.token }}
|
|
28
|
-
NPM_TOKEN: ${{ inputs.token }}
|