
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
@actions/languageserver
Advanced tools
actions-languageserver
hosts the actions-languageservice
and makes it available via the language server protocol (LSP) as a standalone language server.
The package contains TypeScript types and compiled ECMAScript modules.
npm install @actions/languageserver
vscode-languageserver-node
For the server, import the module. It detects whether it's running in a Node.js environment or a web worker and initializes the appropriate connection.
server.ts
:
import "@actions/languageserver";
For the client, create a new LanguageClient
pointing to the server module.
client.ts
:
import {LanguageClient, ServerOptions, TransportKind} from "vscode-languageclient/node";
const debugOptions = {execArgv: ["--nolazy", "--inspect=6010"]};
const clientOptions: LanguageClientOptions = {
documentSelector: [{
pattern: "**/.github/workflows/*.{yaml,yml}"
}]
};
const serverModule = context.asAbsolutePath(path.join("dist", "server.js"));
const serverOptions: ServerOptions = {
run: {module: serverModule, transport: TransportKind.ipc},
debug: {
module: serverModule,
transport: TransportKind.ipc,
options: debugOptions
}
};
const client = new LanguageClient("actions-language", "GitHub Actions Language Server", serverOptions, clientOptions);
See ../browser-playground for an example implementation that hosts the language server in a web worker.
The language server accepts initialization options that can be used to configure additional functionality. If you pass in a github.com sessionToken
, the language service will use data from github.com to perform additional validations and provide additional auto-completion suggestions.
export interface InitializationOptions {
/**
* GitHub token that will be used to retrieve additional information from github.com
*
* Requires the `repo` and `workflow` scopes
*/
sessionToken?: string;
/**
* List of repositories that the language server should be aware of
*/
repos?: RepositoryContext[];
/**
* Desired log level
*/
logLevel?: LogLevel;
}
pass the initializationOptions
to the LanguageClient
when establishing the connection:
const clientOptions: LanguageClientOptions = {
documentSelector: [{
pattern: "**/.github/workflows/*.{yaml,yml}"
}],
initializationOptions: initializationOptions
};
const client = new LanguageClient("actions-language", "GitHub Actions Language Server", serverOptions, clientOptions);
See CONTRIBUTING.md at the root of the repository for general guidelines and recommendations.
If you do want to contribute, please run prettier to format your code and add unit tests as appropriate before submitting your PR.
npm run build
or to watch for changes
npm run watch
npm test
or to watch for changes and run tests:
npm run test-watch
npm run format-check
This project is licensed under the terms of the MIT open source license. Please refer to MIT for the full terms.
FAQs
Language server for GitHub Actions
The npm package @actions/languageserver receives a total of 337 weekly downloads. As such, @actions/languageserver popularity was classified as not popular.
We found that @actions/languageserver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.