@xpertss/projen-types 0.0.19 → 0.0.21

package/API.md

@@ -15078,7 +15078,7 @@ const actionDogfoodOptions: ActionDogfoodOptions = { ... }
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@xpertss/projen-types.ActionDogfoodOptions.property.cleanup">cleanup</a></code> | <code>string[]</code> | Shell cleanup, run once at the end with `if: always()`, so repeated runs start clean. |
+| <code><a href="#@xpertss/projen-types.ActionDogfoodOptions.property.cleanup">cleanup</a></code> | <code>string[]</code> | Shell cleanup, run once at the end with `if: always()` so repeated runs start clean. |
 | <code><a href="#@xpertss/projen-types.ActionDogfoodOptions.property.scenario">scenario</a></code> | <code><a href="#@xpertss/projen-types.ActionDogfoodStep">ActionDogfoodStep</a>[]</code> | One or more scenario steps, run in order, in the dogfood job. |
 
 ---
@@ -15091,7 +15091,11 @@ public readonly cleanup: string[];
 
 - *Type:* string[]
 
-Shell cleanup, run once at the end with `if: always()`, so repeated runs start clean.
+Shell cleanup, run once at the end with `if: always()` so repeated runs start clean.
+
+Intentionally **best-effort**: unlike the assert step it does
+*not* run under `set -e`, so a failing line (e.g. deleting an already
+deleted ref) does not fail the job.
 
 ---
 
@@ -15141,6 +15145,10 @@ public readonly assertions: string[];
 
 Shell assertions after this invocation - the job fails unless every one exits 0.
 
+The generated step runs under `set -euo pipefail`, so a failing
+assertion fails the step immediately rather than being masked by a later,
+passing one.
+
 ---
 
 ##### `name`<sup>Required</sup> <a name="name" id="@xpertss/projen-types.ActionDogfoodStep.property.name"></a>
@@ -15209,6 +15217,7 @@ const actionSonarWorkflowOptions: ActionSonarWorkflowOptions = { ... }
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
 | <code><a href="#@xpertss/projen-types.ActionSonarWorkflowOptions.property.sonarHostUrl">sonarHostUrl</a></code> | <code>string</code> | URL of the org's SonarCloud instance (e.g. `https://sonarcloud.io`). Required, no default - a guessed server is worse than a loud failure. |
+| <code><a href="#@xpertss/projen-types.ActionSonarWorkflowOptions.property.sonarOrganization">sonarOrganization</a></code> | <code>string</code> | SonarCloud organization key (`sonar.organization`). Mandatory for the Scanner CLI on SonarCloud - it is not derived from the token, so a scan without it always fails. |
 | <code><a href="#@xpertss/projen-types.ActionSonarWorkflowOptions.property.sonarPullRequestGate">sonarPullRequestGate</a></code> | <code>boolean</code> | Whether `sonar.yml` also runs on `pull_request` as a pass/fail gate. |
 | <code><a href="#@xpertss/projen-types.ActionSonarWorkflowOptions.property.sonarTokenSecret">sonarTokenSecret</a></code> | <code>string</code> | *No description.* |
 
@@ -15226,6 +15235,19 @@ URL of the org's SonarCloud instance (e.g. `https://sonarcloud.io`). Required, n
 
 ---
 
+##### `sonarOrganization`<sup>Optional</sup> <a name="sonarOrganization" id="@xpertss/projen-types.ActionSonarWorkflowOptions.property.sonarOrganization"></a>
+
+```typescript
+public readonly sonarOrganization: string;
+```
+
+- *Type:* string
+- *Default:* "xpertss"
+
+SonarCloud organization key (`sonar.organization`). Mandatory for the Scanner CLI on SonarCloud - it is not derived from the token, so a scan without it always fails.
+
+---
+
 ##### `sonarPullRequestGate`<sup>Optional</sup> <a name="sonarPullRequestGate" id="@xpertss/projen-types.ActionSonarWorkflowOptions.property.sonarPullRequestGate"></a>
 
 ```typescript
@@ -15266,8 +15288,12 @@ const cdkAppProjectOptions: CdkAppProjectOptions = { ... }
 | --- | --- | --- |
 | <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.name">name</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.cdkVersion">cdkVersion</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.copyrightOwner">copyrightOwner</a></code> | <code>string</code> | Copyright owner named in the `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.copyrightPeriod">copyrightPeriod</a></code> | <code>string</code> | Copyright period named in the `LICENSE`. |
 | <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.editorconfig">editorconfig</a></code> | <code>boolean</code> | Write a projen-managed `.editorconfig`. |
 | <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.gheTokenSecret">gheTokenSecret</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.license">license</a></code> | <code>string</code> | SPDX identifier for the generated `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.licensed">licensed</a></code> | <code>boolean</code> | Write a `LICENSE`. |
 | <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.ecrEcs">ecrEcs</a></code> | <code><a href="#@xpertss/projen-types.EcrEcsOptions">EcrEcsOptions</a></code> | *No description.* |
 | <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.edgeResources">edgeResources</a></code> | <code>string[]</code> | *No description.* |
 | <code><a href="#@xpertss/projen-types.CdkAppProjectOptions.property.environments">environments</a></code> | <code>string \| <a href="#@xpertss/projen-types.EnvironmentOptions">EnvironmentOptions</a>[]</code> | Deploy targets for the manual-dispatch deploy workflow, e.g. ["dev", "stage", "prod"]. No `deploy` workflow is generated when this is empty or omitted. |
@@ -15297,6 +15323,32 @@ public readonly cdkVersion: string;
 
 ---
 
+##### `copyrightOwner`<sup>Optional</sup> <a name="copyrightOwner" id="@xpertss/projen-types.CdkAppProjectOptions.property.copyrightOwner"></a>
+
+```typescript
+public readonly copyrightOwner: string;
+```
+
+- *Type:* string
+- *Default:* "Xpert Software"
+
+Copyright owner named in the `LICENSE`.
+
+---
+
+##### `copyrightPeriod`<sup>Optional</sup> <a name="copyrightPeriod" id="@xpertss/projen-types.CdkAppProjectOptions.property.copyrightPeriod"></a>
+
+```typescript
+public readonly copyrightPeriod: string;
+```
+
+- *Type:* string
+- *Default:* the current year
+
+Copyright period named in the `LICENSE`.
+
+---
+
 ##### `editorconfig`<sup>Optional</sup> <a name="editorconfig" id="@xpertss/projen-types.CdkAppProjectOptions.property.editorconfig"></a>
 
 ```typescript
@@ -15321,6 +15373,32 @@ public readonly gheTokenSecret: string;
 
 ---
 
+##### `license`<sup>Optional</sup> <a name="license" id="@xpertss/projen-types.CdkAppProjectOptions.property.license"></a>
+
+```typescript
+public readonly license: string;
+```
+
+- *Type:* string
+- *Default:* "MIT"
+
+SPDX identifier for the generated `LICENSE`.
+
+---
+
+##### `licensed`<sup>Optional</sup> <a name="licensed" id="@xpertss/projen-types.CdkAppProjectOptions.property.licensed"></a>
+
+```typescript
+public readonly licensed: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Write a `LICENSE`.
+
+---
+
 ##### `ecrEcs`<sup>Optional</sup> <a name="ecrEcs" id="@xpertss/projen-types.CdkAppProjectOptions.property.ecrEcs"></a>
 
 ```typescript
@@ -15428,8 +15506,12 @@ const cdkInfraProjectOptions: CdkInfraProjectOptions = { ... }
 | --- | --- | --- |
 | <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.name">name</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.cdkVersion">cdkVersion</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.copyrightOwner">copyrightOwner</a></code> | <code>string</code> | Copyright owner named in the `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.copyrightPeriod">copyrightPeriod</a></code> | <code>string</code> | Copyright period named in the `LICENSE`. |
 | <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.editorconfig">editorconfig</a></code> | <code>boolean</code> | Write a projen-managed `.editorconfig`. |
 | <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.gheTokenSecret">gheTokenSecret</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.license">license</a></code> | <code>string</code> | SPDX identifier for the generated `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.licensed">licensed</a></code> | <code>boolean</code> | Write a `LICENSE`. |
 | <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.ecrEcs">ecrEcs</a></code> | <code><a href="#@xpertss/projen-types.EcrEcsOptions">EcrEcsOptions</a></code> | *No description.* |
 | <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.edgeResources">edgeResources</a></code> | <code>string[]</code> | *No description.* |
 | <code><a href="#@xpertss/projen-types.CdkInfraProjectOptions.property.environments">environments</a></code> | <code>string \| <a href="#@xpertss/projen-types.EnvironmentOptions">EnvironmentOptions</a>[]</code> | Deploy targets for the manual-dispatch deploy workflow, e.g. ["dev", "stage", "prod"]. No `deploy` workflow is generated when this is empty or omitted. |
@@ -15457,6 +15539,32 @@ public readonly cdkVersion: string;
 
 ---
 
+##### `copyrightOwner`<sup>Optional</sup> <a name="copyrightOwner" id="@xpertss/projen-types.CdkInfraProjectOptions.property.copyrightOwner"></a>
+
+```typescript
+public readonly copyrightOwner: string;
+```
+
+- *Type:* string
+- *Default:* "Xpert Software"
+
+Copyright owner named in the `LICENSE`.
+
+---
+
+##### `copyrightPeriod`<sup>Optional</sup> <a name="copyrightPeriod" id="@xpertss/projen-types.CdkInfraProjectOptions.property.copyrightPeriod"></a>
+
+```typescript
+public readonly copyrightPeriod: string;
+```
+
+- *Type:* string
+- *Default:* the current year
+
+Copyright period named in the `LICENSE`.
+
+---
+
 ##### `editorconfig`<sup>Optional</sup> <a name="editorconfig" id="@xpertss/projen-types.CdkInfraProjectOptions.property.editorconfig"></a>
 
 ```typescript
@@ -15481,6 +15589,32 @@ public readonly gheTokenSecret: string;
 
 ---
 
+##### `license`<sup>Optional</sup> <a name="license" id="@xpertss/projen-types.CdkInfraProjectOptions.property.license"></a>
+
+```typescript
+public readonly license: string;
+```
+
+- *Type:* string
+- *Default:* "MIT"
+
+SPDX identifier for the generated `LICENSE`.
+
+---
+
+##### `licensed`<sup>Optional</sup> <a name="licensed" id="@xpertss/projen-types.CdkInfraProjectOptions.property.licensed"></a>
+
+```typescript
+public readonly licensed: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Write a `LICENSE`.
+
+---
+
 ##### `ecrEcs`<sup>Optional</sup> <a name="ecrEcs" id="@xpertss/projen-types.CdkInfraProjectOptions.property.ecrEcs"></a>
 
 ```typescript
@@ -15536,8 +15670,12 @@ const cdkTypescriptProjectOptions: CdkTypescriptProjectOptions = { ... }
 | --- | --- | --- |
 | <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.name">name</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.cdkVersion">cdkVersion</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.copyrightOwner">copyrightOwner</a></code> | <code>string</code> | Copyright owner named in the `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.copyrightPeriod">copyrightPeriod</a></code> | <code>string</code> | Copyright period named in the `LICENSE`. |
 | <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.editorconfig">editorconfig</a></code> | <code>boolean</code> | Write a projen-managed `.editorconfig`. |
 | <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.gheTokenSecret">gheTokenSecret</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.license">license</a></code> | <code>string</code> | SPDX identifier for the generated `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.licensed">licensed</a></code> | <code>boolean</code> | Write a `LICENSE`. |
 | <code><a href="#@xpertss/projen-types.CdkTypescriptProjectOptions.property.environments">environments</a></code> | <code>string \| <a href="#@xpertss/projen-types.EnvironmentOptions">EnvironmentOptions</a>[]</code> | *No description.* |
 
 ---
@@ -15563,6 +15701,32 @@ public readonly cdkVersion: string;
 
 ---
 
+##### `copyrightOwner`<sup>Optional</sup> <a name="copyrightOwner" id="@xpertss/projen-types.CdkTypescriptProjectOptions.property.copyrightOwner"></a>
+
+```typescript
+public readonly copyrightOwner: string;
+```
+
+- *Type:* string
+- *Default:* "Xpert Software"
+
+Copyright owner named in the `LICENSE`.
+
+---
+
+##### `copyrightPeriod`<sup>Optional</sup> <a name="copyrightPeriod" id="@xpertss/projen-types.CdkTypescriptProjectOptions.property.copyrightPeriod"></a>
+
+```typescript
+public readonly copyrightPeriod: string;
+```
+
+- *Type:* string
+- *Default:* the current year
+
+Copyright period named in the `LICENSE`.
+
+---
+
 ##### `editorconfig`<sup>Optional</sup> <a name="editorconfig" id="@xpertss/projen-types.CdkTypescriptProjectOptions.property.editorconfig"></a>
 
 ```typescript
@@ -15587,6 +15751,32 @@ public readonly gheTokenSecret: string;
 
 ---
 
+##### `license`<sup>Optional</sup> <a name="license" id="@xpertss/projen-types.CdkTypescriptProjectOptions.property.license"></a>
+
+```typescript
+public readonly license: string;
+```
+
+- *Type:* string
+- *Default:* "MIT"
+
+SPDX identifier for the generated `LICENSE`.
+
+---
+
+##### `licensed`<sup>Optional</sup> <a name="licensed" id="@xpertss/projen-types.CdkTypescriptProjectOptions.property.licensed"></a>
+
+```typescript
+public readonly licensed: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Write a `LICENSE`.
+
+---
+
 ##### `environments`<sup>Optional</sup> <a name="environments" id="@xpertss/projen-types.CdkTypescriptProjectOptions.property.environments"></a>
 
 ```typescript
@@ -15613,8 +15803,12 @@ const commonCdkOptions: CommonCdkOptions = { ... }
 | --- | --- | --- |
 | <code><a href="#@xpertss/projen-types.CommonCdkOptions.property.name">name</a></code> | <code>string</code> | *No description.* |
 | <code><a href="#@xpertss/projen-types.CommonCdkOptions.property.cdkVersion">cdkVersion</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@xpertss/projen-types.CommonCdkOptions.property.copyrightOwner">copyrightOwner</a></code> | <code>string</code> | Copyright owner named in the `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.CommonCdkOptions.property.copyrightPeriod">copyrightPeriod</a></code> | <code>string</code> | Copyright period named in the `LICENSE`. |
 | <code><a href="#@xpertss/projen-types.CommonCdkOptions.property.editorconfig">editorconfig</a></code> | <code>boolean</code> | Write a projen-managed `.editorconfig`. |
 | <code><a href="#@xpertss/projen-types.CommonCdkOptions.property.gheTokenSecret">gheTokenSecret</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@xpertss/projen-types.CommonCdkOptions.property.license">license</a></code> | <code>string</code> | SPDX identifier for the generated `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.CommonCdkOptions.property.licensed">licensed</a></code> | <code>boolean</code> | Write a `LICENSE`. |
 
 ---
 
@@ -15639,6 +15833,32 @@ public readonly cdkVersion: string;
 
 ---
 
+##### `copyrightOwner`<sup>Optional</sup> <a name="copyrightOwner" id="@xpertss/projen-types.CommonCdkOptions.property.copyrightOwner"></a>
+
+```typescript
+public readonly copyrightOwner: string;
+```
+
+- *Type:* string
+- *Default:* "Xpert Software"
+
+Copyright owner named in the `LICENSE`.
+
+---
+
+##### `copyrightPeriod`<sup>Optional</sup> <a name="copyrightPeriod" id="@xpertss/projen-types.CommonCdkOptions.property.copyrightPeriod"></a>
+
+```typescript
+public readonly copyrightPeriod: string;
+```
+
+- *Type:* string
+- *Default:* the current year
+
+Copyright period named in the `LICENSE`.
+
+---
+
 ##### `editorconfig`<sup>Optional</sup> <a name="editorconfig" id="@xpertss/projen-types.CommonCdkOptions.property.editorconfig"></a>
 
 ```typescript
@@ -15663,6 +15883,32 @@ public readonly gheTokenSecret: string;
 
 ---
 
+##### `license`<sup>Optional</sup> <a name="license" id="@xpertss/projen-types.CommonCdkOptions.property.license"></a>
+
+```typescript
+public readonly license: string;
+```
+
+- *Type:* string
+- *Default:* "MIT"
+
+SPDX identifier for the generated `LICENSE`.
+
+---
+
+##### `licensed`<sup>Optional</sup> <a name="licensed" id="@xpertss/projen-types.CommonCdkOptions.property.licensed"></a>
+
+```typescript
+public readonly licensed: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Write a `LICENSE`.
+
+---
+
 ### CommonJavaOptions <a name="CommonJavaOptions" id="@xpertss/projen-types.CommonJavaOptions"></a>
 
 #### Initializer <a name="Initializer" id="@xpertss/projen-types.CommonJavaOptions.Initializer"></a>
@@ -15738,7 +15984,7 @@ public readonly copyrightOwner: string;
 ```
 
 - *Type:* string
-- *Default:* "xpertss" (same as `GitHubActionProject`)
+- *Default:* "Xpert Software"
 
 Copyright owner named in the `LICENSE`.
 
@@ -16206,11 +16452,14 @@ const gitHubActionProjectOptions: GitHubActionProjectOptions = { ... }
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.staleOptions">staleOptions</a></code> | <code>projen.github.StaleOptions</code> | Auto-close stale issues and pull requests. |
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.vscode">vscode</a></code> | <code>boolean</code> | Enable VSCode integration. |
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.sonarHostUrl">sonarHostUrl</a></code> | <code>string</code> | URL of the org's SonarCloud instance (e.g. `https://sonarcloud.io`). MUST be reachable from github.com-hosted (public) runners (AD-001). Required, no default: a guessed server is worse than a loud failure. |
+| <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.copyrightOwner">copyrightOwner</a></code> | <code>string</code> | Copyright owner named in the `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.copyrightPeriod">copyrightPeriod</a></code> | <code>string</code> | Copyright period named in the `LICENSE`. |
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.description">description</a></code> | <code>string</code> | One-line description of the action. |
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.dogfood">dogfood</a></code> | <code><a href="#@xpertss/projen-types.ActionDogfoodOptions">ActionDogfoodOptions</a></code> | The dogfood scenario (AD-001). |
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.editorconfig">editorconfig</a></code> | <code>boolean</code> | Write a projen-managed `.editorconfig`. |
-| <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.gheTokenSecret">gheTokenSecret</a></code> | <code>string</code> | Name of the GitHub Actions secret holding the PAT used for projen-automation PR comments (F003) and, when the action has a `token` input, the dogfood's invocation of it. |
+| <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.gheTokenSecret">gheTokenSecret</a></code> | <code>string</code> | Name of the GitHub Actions secret holding the PAT used for projen-automation PR comments (F003) and the drift-check's PR comments. |
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.license">license</a></code> | <code>string</code> | SPDX identifier for the generated `LICENSE`. |
+| <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.sonarOrganization">sonarOrganization</a></code> | <code>string</code> | SonarCloud organization key (`sonar.organization`), required by the Scanner CLI on SonarCloud. |
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.sonarPullRequestGate">sonarPullRequestGate</a></code> | <code>boolean</code> | Whether `sonar.yml` also runs on `pull_request` as a pass/fail gate. |
 | <code><a href="#@xpertss/projen-types.GitHubActionProjectOptions.property.sonarTokenSecret">sonarTokenSecret</a></code> | <code>string</code> | *No description.* |
 
@@ -16596,6 +16845,32 @@ URL of the org's SonarCloud instance (e.g. `https://sonarcloud.io`). MUST be rea
 
 ---
 
+##### `copyrightOwner`<sup>Optional</sup> <a name="copyrightOwner" id="@xpertss/projen-types.GitHubActionProjectOptions.property.copyrightOwner"></a>
+
+```typescript
+public readonly copyrightOwner: string;
+```
+
+- *Type:* string
+- *Default:* "Xpert Software"
+
+Copyright owner named in the `LICENSE`.
+
+---
+
+##### `copyrightPeriod`<sup>Optional</sup> <a name="copyrightPeriod" id="@xpertss/projen-types.GitHubActionProjectOptions.property.copyrightPeriod"></a>
+
+```typescript
+public readonly copyrightPeriod: string;
+```
+
+- *Type:* string
+- *Default:* the current year
+
+Copyright period named in the `LICENSE`.
+
+---
+
 ##### `description`<sup>Optional</sup> <a name="description" id="@xpertss/projen-types.GitHubActionProjectOptions.property.description"></a>
 
 ```typescript
@@ -16657,7 +16932,11 @@ public readonly gheTokenSecret: string;
 - *Type:* string
 - *Default:* "PROJEN_GITHUB_TOKEN"
 
-Name of the GitHub Actions secret holding the PAT used for projen-automation PR comments (F003) and, when the action has a `token` input, the dogfood's invocation of it.
+Name of the GitHub Actions secret holding the PAT used for projen-automation PR comments (F003) and the drift-check's PR comments.
+
+It is **not** wired into the dogfood automatically: a dogfood that invokes
+an action with a `token` input must reference this secret in the step's
+`inputs` (e.g. `token: '${{ secrets.PROJEN_GITHUB_TOKEN }}'`).
 
 ---
 
@@ -16674,6 +16953,19 @@ SPDX identifier for the generated `LICENSE`.
 
 ---
 
+##### `sonarOrganization`<sup>Optional</sup> <a name="sonarOrganization" id="@xpertss/projen-types.GitHubActionProjectOptions.property.sonarOrganization"></a>
+
+```typescript
+public readonly sonarOrganization: string;
+```
+
+- *Type:* string
+- *Default:* "xpertss"
+
+SonarCloud organization key (`sonar.organization`), required by the Scanner CLI on SonarCloud.
+
+---
+
 ##### `sonarPullRequestGate`<sup>Optional</sup> <a name="sonarPullRequestGate" id="@xpertss/projen-types.GitHubActionProjectOptions.property.sonarPullRequestGate"></a>
 
 ```typescript
@@ -16803,7 +17095,7 @@ public readonly copyrightOwner: string;
 ```
 
 - *Type:* string
-- *Default:* "xpertss" (same as `GitHubActionProject`)
+- *Default:* "Xpert Software"
 
 Copyright owner named in the `LICENSE`.
 
@@ -17132,7 +17424,7 @@ public readonly copyrightOwner: string;
 ```
 
 - *Type:* string
-- *Default:* "xpertss" (same as `GitHubActionProject`)
+- *Default:* "Xpert Software"
 
 Copyright owner named in the `LICENSE`.
 
@@ -17473,7 +17765,7 @@ public readonly copyrightOwner: string;
 ```
 
 - *Type:* string
-- *Default:* "xpertss" (same as `GitHubActionProject`)
+- *Default:* "Xpert Software"
 
 Copyright owner named in the `LICENSE`.
 
@@ -17795,7 +18087,7 @@ public readonly copyrightOwner: string;
 ```
 
 - *Type:* string
-- *Default:* "xpertss" (same as `GitHubActionProject`)
+- *Default:* "Xpert Software"
 
 Copyright owner named in the `LICENSE`.
 
@@ -18195,7 +18487,7 @@ public readonly copyrightOwner: string;
 ```
 
 - *Type:* string
-- *Default:* "xpertss" (same as `GitHubActionProject`)
+- *Default:* "Xpert Software"
 
 Copyright owner named in the `LICENSE`.
 

package/README.md

@@ -214,6 +214,7 @@ You get:
 - `cdk.json`, `cdk synth` / `cdk diff` / `cdk deploy` tasks, and the standard `AwsCdkTypeScriptApp` layout (CDK 2.189.1 by default).
 - `.github/workflows/build.yml` - PR build that hard-fails on projen drift.
 - `.github/workflows/deploy.yml` - manual dispatch with one `deploy-<env>` job per environment (runs `cdk deploy --all` with `--context environment=<env>`); `requiresApproval` environments get a GitHub Environment approval gate.
+- `LICENSE` (MIT by default), `.editorconfig`, and the projen drift check.
 - `src/constructs/edge-networking.ts` - helper constructs only for the requested `edgeResources` (`cloudfront`, `route53`, `apigateway`, `cognito`, `sqs`).
 - `src/constructs/ecr-ecs.ts` when `ecrEcs.enabled` - ECR repo + Fargate service; `externalImageSource: true` (default) means the service pulls an image built outside this repo.
 
@@ -491,6 +492,7 @@ const project = new GitHubActionProject({
   name: 'auto-commit',
   description: 'Stage a folder and, only if it changed, commit and push it',
   sonarHostUrl: 'https://sonarcloud.io',       // required, no default - your SonarCloud URL
+  sonarOrganization: 'xpertss',                 // default - your SonarCloud org key
   dogfood: {
     // Two scenario steps: the "changed" path and the "no-op" path are both
     // load-bearing behavior for this action (a double-commit or a
@@ -608,6 +610,9 @@ CDK project types (`CdkInfraProjectOptions` / `CdkAppProjectOptions`):
 | `name` | - (required) | Project name; must match `package.json` |
 | `cdkVersion` | `2.189.1` | AWS CDK version |
 | `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT |
+| `licensed` | `true` | Write a `LICENSE` |
+| `license` | `MIT` | SPDX identifier for the `LICENSE` |
+| `copyrightOwner` / `copyrightPeriod` | `Xpert Software` / current year | Named in the `LICENSE` |
 | `environments` | - (no `deploy` workflow) | Deploy targets for the `deploy` workflow; strings or `EnvironmentOptions` |
 | `ecrEcs` | - | `EcrEcsOptions` - `enabled`, `externalImageSource` (default `true`) |
 | `edgeResources` | - | Subset of `cloudfront`, `route53`, `apigateway`, `cognito`, `sqs` |
@@ -632,7 +637,7 @@ Java project types (`JavaMavenProjectOptions` and everything built on it - `Java
 | `pluginVersions` | - | Exact-version overrides for this package's defaults, keyed by `groupId/artifactId` |
 | `licensed` | `true` | Write a `LICENSE` |
 | `license` | `MIT` | SPDX identifier for the `LICENSE` |
-| `copyrightOwner` / `copyrightPeriod` | `xpertss` / current year | Named in the `LICENSE` |
+| `copyrightOwner` / `copyrightPeriod` | `Xpert Software` / current year | Named in the `LICENSE` |
 | `editorconfig` | `true` | Write a projen-managed `.editorconfig` (also on the CDK and action types) |
 | `upgradeWorkflow` | `true` | Generate the nightly update report (`upgrade.yml`) |
 | `sonarProjectKey` | - | SonarQube project key; the sonar step is skipped when unset |
@@ -688,11 +693,13 @@ Plain strings (`'dev'`) are shorthand for `{ name: 'dev' }`.
 | `name` | - (required) | Project name |
 | `description` | - | One-line description; used in the default README template and recorded in the private `package.json` |
 | `sonarHostUrl` | - (required) | URL of your SonarCloud instance (e.g. `https://sonarcloud.io`); must be reachable from github.com-hosted runners |
+| `sonarOrganization` | `xpertss` | SonarCloud org key (`sonar.organization`); required by the Scanner CLI, not derived from the token |
 | `sonarTokenSecret` | `SONAR_TOKEN` | GitHub secret holding the Sonar token |
 | `sonarPullRequestGate` | `true` | Whether `sonar.yml` also runs on `pull_request` as a pass/fail gate |
 | `dogfood` | - (a `test-dogfood.yml` that fails until you declare one) | `ActionDogfoodOptions` - the scenario that exercises the action end-to-end via `uses: ./` |
 | `license` | `MIT` | SPDX identifier for the generated `LICENSE` |
-| `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT |
+| `copyrightOwner` / `copyrightPeriod` | `Xpert Software` / current year | Named in the `LICENSE` |
+| `gheTokenSecret` | `PROJEN_GITHUB_TOKEN` | GitHub secret holding projen's PAT (drift-check PR comments); a dogfood that passes a `token` input must reference this secret in the step's `inputs` |
 
 `ActionDogfoodOptions`/`ActionDogfoodStep` - the dogfood scenario (`test-dogfood.yml`):
 
@@ -707,7 +714,7 @@ interface ActionDogfoodStep {
   readonly id?: string;                     // step id for the `uses: ./` call; default: a slug of `name`
   readonly fixtureSteps?: string[];         // shell, before the invocation (default: none)
   readonly inputs?: Record<string, string>; // `with:` for this invocation (default: none)
-  readonly assertions: string[];            // shell, after the invocation - required, job fails unless all exit 0
+   readonly assertions: string[];            // shell, after the invocation - required; the step runs under set -euo pipefail so any failing line fails the job
 }
 ```
 

package/lib/actions/action-build-workflow.js

@@ -20,7 +20,7 @@ const ACTIONLINT_SHA256 = '8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc
  * the release build job, so the lint commands exist in exactly one place.
  */
 class ActionBuildWorkflow extends projen_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@xpertss/projen-types.ActionBuildWorkflow", version: "0.0.19" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@xpertss/projen-types.ActionBuildWorkflow", version: "0.0.21" };
     task;
     workflow;
     constructor(scope) {

package/lib/actions/action-dogfood-workflow.d.ts

@@ -26,13 +26,23 @@ export interface ActionDogfoodStep {
      * @default {}
      */
     readonly inputs?: Record<string, string>;
-    /** Shell assertions after this invocation - the job fails unless every one exits 0. */
+    /**
+     * Shell assertions after this invocation - the job fails unless every one
+     * exits 0. The generated step runs under `set -euo pipefail`, so a failing
+     * assertion fails the step immediately rather than being masked by a later,
+     * passing one.
+     */
     readonly assertions: string[];
 }
 export interface ActionDogfoodOptions {
     /** One or more scenario steps, run in order, in the dogfood job. */
     readonly scenario: ActionDogfoodStep[];
-    /** Shell cleanup, run once at the end with `if: always()`, so repeated runs start clean. */
+    /**
+     * Shell cleanup, run once at the end with `if: always()` so repeated runs
+     * start clean. Intentionally **best-effort**: unlike the assert step it does
+     * *not* run under `set -e`, so a failing line (e.g. deleting an already
+     * deleted ref) does not fail the job.
+     */
     readonly cleanup: string[];
 }
 /**