diff --git a/.github/workflows/checkout-and-lint.yml b/.github/workflows/checkout-and-lint.yml index 6383e14c1..a84ab3505 100644 --- a/.github/workflows/checkout-and-lint.yml +++ b/.github/workflows/checkout-and-lint.yml @@ -3,6 +3,9 @@ name: Checkout and lint on: workflow_dispatch +permissions: + contents: read + jobs: build: @@ -10,14 +13,15 @@ jobs: strategy: matrix: - node-version: [22.x] + node-version: [24.x] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v2 + uses: actions/setup-node@v4 with: node-version: ${{ matrix.node-version }} + cache: npm - name: Install dependencies and run lint run: npm run build:dev:ci - run: npm run lint diff --git a/.github/workflows/checkout-install-dep-build-dev-prod.yml b/.github/workflows/checkout-install-dep-build-dev-prod.yml index 4d8327b8b..bb87dd441 100644 --- a/.github/workflows/checkout-install-dep-build-dev-prod.yml +++ b/.github/workflows/checkout-install-dep-build-dev-prod.yml @@ -13,6 +13,9 @@ on: - main - 'release/**' +permissions: + contents: read + jobs: build: @@ -20,10 +23,10 @@ jobs: strategy: matrix: - node-version: [22.x] + node-version: [24.x] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - uses: "finnp/create-file-action@master" env: FILE_NAME: "constellation/lib_asset.json" @@ -37,9 +40,10 @@ jobs: FILE_NAME: "constellation/constellation-core.placeholder.js" FILE_DATA: "// placeholder for constellaiton-core.js" - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v2 + uses: actions/setup-node@v4 with: node-version: ${{ matrix.node-version }} + cache: npm - name: Install dependencies run: npm run build:dev:ci - name: Run build:dev diff --git a/.github/workflows/github-actions-demo.yml b/.github/workflows/github-actions-demo.yml deleted file mode 100644 index e3750ae31..000000000 --- a/.github/workflows/github-actions-demo.yml +++ /dev/null @@ -1,21 +0,0 @@ -name: GitHub Actions Example -on: - workflow_dispatch: - -jobs: - Info_About_Action_And_Repo: - runs-on: - ubuntu-latest - - steps: - - run: echo "The job was automatically triggered by a ${{ github.event_name }} event." - - run: echo "This job is now running on a ${{ runner.os }} server hosted by GitHub!" - - run: echo "The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}." - - name: Check out repository code - uses: actions/checkout@v2 - - run: echo "The ${{ github.repository }} repository has been cloned to the runner." - - run: echo "The workflow is now ready to test your code on the runner." - - name: List files in the repository - run: | - ls ${{ github.workspace }} - - run: echo "This job's status is ${{ job.status }}." diff --git a/.github/workflows/mend-scan.yml b/.github/workflows/mend-scan.yml deleted file mode 100644 index 31bb75f00..000000000 --- a/.github/workflows/mend-scan.yml +++ /dev/null @@ -1,56 +0,0 @@ -# Reference: https://github.com/mend-toolkit/mend-examples/blob/main/Unified%20Agent/CI-CD/GitHub.yml - -name: Mend Unified Agent Release Scan -on: - workflow_dispatch: - push: - branches: - - 'main' - schedule: - - cron: "0 0 * * 0" -jobs: - mendscan: - env: - WS_APIKEY: ${{secrets.MEND_APIKEY}} - WS_USERKEY: ${{secrets.MEND_USERKEY}} - WS_WSS_URL: ${{secrets.MEND_WS_WSS_URL}} - runs-on: ubuntu-latest - - steps: - - uses: actions/checkout@v4 - - name: Set up JDK - uses: actions/setup-java@v2 - with: - java-version: '11' - distribution: 'adopt' - # - name: Build with Gradle - # run: ./gradlew -Prelease.useLastTag=false clean build - - name: Mend Unified Agent Scan - env: - WS_PRODUCTNAME: ${{vars.MEND_PRODUCT_NAME}} - WS_PROJECTNAME: ${{github.event.repository.name}}_${{github.ref_name}} - WS_GENERATEPROJECTDETAILSJSON: true - WS_GRADLE_ADDITIONALARGUMENTS: -Prelease.useLastTag=false - run: | - echo Downloading Mend Unified Agent - curl -LJO https://unified-agent.s3.amazonaws.com/wss-unified-agent.jar - if [[ "$(curl -sL https://unified-agent.s3.amazonaws.com/wss-unified-agent.jar.sha256)" != "$(sha256sum wss-unified-agent.jar)" ]] ; then - echo "Integrity Check Failed" - else - echo "Integrity Check Passed" - echo Starting Unified Agent Scan - java -jar wss-unified-agent.jar - fi - - name: 'Upload WhiteSource folder' - uses: actions/upload-artifact@v4 - with: - name: Mend - path: whitesource - retention-days: 14 - - name: 'Upload Mend folder if failure' - uses: actions/upload-artifact@v4 - if: failure() - with: - name: Mend - path: whitesource - retention-days: 14 diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml deleted file mode 100644 index b48478ee3..000000000 --- a/.github/workflows/playwright.yml +++ /dev/null @@ -1,25 +0,0 @@ -name: Playwright Tests -on: - push: - branches: [ main, master ] - pull_request: - branches: [ main, master ] -jobs: - test: - timeout-minutes: 60 - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v2 - - uses: actions/setup-node@v2 - with: - node-version: '22.x' - - name: Install dependencies - run: npm run build:dev:ci - - name: Install Playwright - run: npx playwright install --with-deps - - uses: actions/upload-artifact@v4 - if: always() - with: - name: playwright-report - path: tests/playwright-report/ - retention-days: 30