@emartech/program-executor
Advanced tools
Sorry, the diff of this file is not supported yet
| # Please see the documentation for all configuration options: | ||
| # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates | ||
| version: 2 | ||
| registries: | ||
| npm-npmjs: | ||
| type: npm-registry | ||
| url: https://registry.npmjs.org | ||
| token: ${{ secrets.NPM_DEPLOYER_TOKEN }} | ||
| updates: | ||
| # Maintain dependencies for npm | ||
| - package-ecosystem: "npm" | ||
| directory: "/" | ||
| registries: | ||
| - npm-npmjs | ||
| schedule: | ||
| interval: "weekly" | ||
| day: "monday" | ||
| time: "09:00" | ||
| # Add assignees | ||
| reviewers: | ||
| - "IvanFroehlich" | ||
| - "MauroGreco" | ||
| - "oliverweisenburger" | ||
| - "dimirovn" | ||
| - "ianhelmrich" | ||
| commit-message: | ||
| # Prefix all commit messages with "npm: " | ||
| prefix: "[dependabot]npm" | ||
| include: "scope" | ||
| open-pull-requests-limit: 5 | ||
| target-branch: "main" |
| name: CI | ||
| on: [push] | ||
| env: | ||
| NPM_TOKEN: ${{ secrets.NPM_PUBLISHER_TOKEN }} | ||
| GH_TOKEN: ${{ secrets.GH_TOKEN }} | ||
| CI_REPO_NAME: ${{ github.repository }} | ||
| CI_COMMIT_ID: ${{ github.sha }} | ||
| jobs: | ||
| test: | ||
| runs-on: ubuntu-latest | ||
| container: node:18-alpine3.16 | ||
| services: | ||
| postgres: | ||
| image: postgres:14-alpine | ||
| env: | ||
| POSTGRES_USER: developer | ||
| POSTGRES_PASSWORD: development_secret | ||
| POSTGRES_DB: programexecutor | ||
| options: >- | ||
| --health-cmd pg_isready | ||
| --health-interval 10s | ||
| --health-timeout 5s | ||
| --health-retries 5 | ||
| ports: | ||
| - 5432:5432 | ||
| steps: | ||
| - name: Check out repository | ||
| uses: actions/checkout@v4 | ||
| - name: Use newest Node version | ||
| uses: actions/setup-node@v3 | ||
| with: | ||
| node-version: "lts/*" | ||
| - name: Set NPM token | ||
| run: npm config set '//registry.npmjs.org/:_authToken' "${{ env.NPM_TOKEN }}" | ||
| - name: npm dependencies | ||
| run: npm install | ||
| - name: npm test | ||
| run: npm test | ||
| env: | ||
| DATABASE_URL: 'postgres://developer:development_secret@postgres:5432/programexecutor' | ||
| deploy: | ||
| name: deploy | ||
| needs: [test] | ||
| runs-on: ubuntu-latest | ||
| if: ${{ github.ref == 'refs/heads/main' }} | ||
| steps: | ||
| - name: Check out repository | ||
| uses: actions/checkout@v3 | ||
| - name: Use newest Node version | ||
| uses: actions/setup-node@v3 | ||
| with: | ||
| node-version: "lts/*" | ||
| - name: Set NPM token | ||
| run: npm config set '//registry.npmjs.org/:_authToken' "${{ env.NPM_TOKEN }}" | ||
| - name: npm dependencies | ||
| run: npm install | ||
| - name: Cache node_modules | ||
| id: cache_node_modules | ||
| uses: actions/cache@v3 | ||
| with: | ||
| path: node_modules | ||
| key: node_modules-${{ hashFiles('**/package-lock.json') }} | ||
| - name: Publish package | ||
| run: CI=true npm run semantic-release |
@@ -1,8 +0,9 @@ | ||
| postgres: | ||
| image: postgres:9.6.3 | ||
| environment: | ||
| - POSTGRES_USER=developer | ||
| - POSTGRES_PASSWORD=development_secret | ||
| - POSTGRES_DB=programexecutor | ||
| ports: | ||
| - 5435:5432 | ||
| services: | ||
| postgres: | ||
| image: postgres:13.12 | ||
| environment: | ||
| - POSTGRES_USER=developer | ||
| - POSTGRES_PASSWORD=development_secret | ||
| - POSTGRES_DB=programexecutor | ||
| ports: | ||
| - 5435:5432 |
+2
-2
@@ -8,3 +8,3 @@ { | ||
| "code-style": "eslint '**/*.js' --ignore-pattern node_modules/", | ||
| "semantic-release": "semantic-release" | ||
| "semantic-release": "semantic-release --branches main" | ||
| }, | ||
@@ -46,3 +46,3 @@ "repository": { | ||
| }, | ||
| "version": "3.5.1" | ||
| "version": "3.6.0" | ||
| } |
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
81789
3.91%38
8.57%