
Product
Rust Support Now in Beta
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
@camunda/c4-connectors
Advanced tools
When opening a PR, a version of storybook with the changes is deployed automatically and can be accessed by clicking on the link in the PR.
There are a few npm packages only available to Camundis, so you first need to create a personal access token on GitHub. To create this token, follow the steps below:
read:packages
.export NPM_TOKEN=ghp_imiJmvG46E6wo7V4ANwurstbrotXafCg
npm i
NOTE: It is highly suggested you add the export-statement to your .profile so it is added to your environment automatically.
# install
yarn
# start storybook
yarn storybook
# build components
yarn build
See this documentation for more information.
TLDR; Use the following environment variables to get a minimal setup running:
#build the project, go to the root directory (camunda-cloud-management-apps)
pnpm build
# camunda-cloud-management-apps/apps/console-sm-backend
NODE_ENV=local SERVICE_NAME=console-sm-backend CAMUNDA_CONSOLE_DISABLE_AUTH=true pnpm run start
# camunda-cloud-management-apps/apps/console-sm-frontend
pnpm run start:local
Navigate to localhost:4200 to open Console. Since the configmap content is just dummy information, fetching of all external data will fail (metrics for telemetry from webapps, ...).
💡 The environment variable CAMUNDA_CONSOLE_DISABLE_AUTH
disables login for Console. That setup simplifies a local instance because there's no dependency that needs to be set up.
💡 The configmap content for the local instance is available in application.yaml.
Simply run our release workflow in the GitHub Actions tab. This will create a new release, publish the package to npm and update the changelog automatically.
You can use YALC to deploy the package locally.
Then you can use the package in another project by adding workspace:
to the dependency version in the package.json
.
We use Playwright screenshot tests to be aware of any visual changes introduced by dependency updates or changes in the component code.
We run VRT inside a docker container to avoid different results caused by different platforms. Simply run:
yarn start:docker-storybook
then
yarn test:visual-regression:docker
The commands above will:
c4-visual-regression
.When developing, it might not always be helpful to run all of these steps at once. You can find more granular scripts in the package.json.
There is a Visual regression tests
workflow that is triggered automatically on
push. You can also trigger it manually in the Actions
tab.
If the workflow fails, you can find the test report by navigating to the
workflow run summary, then scrolling down to the Artifacts
section. Click on
the artifact called Playwright report
to download it, go to your downloads
folder, then open the index.html
file of the test report in your browser to
view the report.
When a VRT fails, this can have two reasons:
Make sure you have the c4-visual-regression
docker container running, or start
it like described here. Then, have a look at the test
report:
yarn report:visual-regression
Double-check that you don't apply any unwanted changes by looking at the difference that is highlighted in the failed test's report.
To update all screenshots, run:
yarn update:visual-regression:docker
The tests should now pass locally and in the CI. Commit and push the updated screenshot(s).
FAQs
Camunda Composite Components
We found that @camunda/c4-connectors demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
Product
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.