
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@testgorilla/eslint-plugin-e2e
Advanced tools
TestGorilla e2e test conventions: tag enforcement, JIRA ticket validation (cross-repo aware), triage-tag exclusivity. Extracted from tgo-qa-automation's eslint-plugin-custom for reuse by repos that collocate their e2e suites.
TestGorilla e2e test conventions as a publishable ESLint plugin, extracted from
tgo-qa-automation's in-repo eslint-plugin-custom so repos that collocate their e2e
suites (starting with tgo-backend) enforce the same review-blocking rules. Design:
docs/e2e-test-collocation-plan.md §4.6.2.
| Rule | Enforces |
|---|---|
require-tag-in-tests | Every test/test.skip has a tag array whose entries start with @, including at least one valid JIRA ticket. Project prefixes are bundled; override via the projects option. |
validate-test-case-tickets | JIRA tickets are unique across tests. With the externalTicketsFile option, uniqueness extends across repos: the file is a manifest of tickets used elsewhere (see below). |
exclusive-triage-tags | At most one of @needs-triage / @skipped / @flaky. |
// .eslintrc.js
plugins: ['@testgorilla/e2e'],
rules: {
'@testgorilla/e2e/require-tag-in-tests': 'error',
'@testgorilla/e2e/exclusive-triage-tags': 'error',
'@testgorilla/e2e/validate-test-case-tickets':
['error', { externalTicketsFile: './.jira-tickets.external.json' }],
},
collect-jira-tickets (shipped as a bin) scans *.spec.ts files and writes a
manifest of { ticket, repo, file, line } entries (@XXX-0000 placeholders are
exempt):
npx collect-jira-tickets --repo tgo-backend --src e2e/tests --out .jira-tickets.json
Each repo checks in the other repos' manifest as .jira-tickets.external.json
for lint-time feedback; a nightly CI job runs the collector on all repos and fails
on intersection (the authoritative check — lint-time is eventually consistent).
jira-projects.json and the ticket-pattern helper are bundled (the old plugin
reached outside its directory into helpers/jira).projects and externalTicketsFile are rule options.collect-jira-tickets.tgo-qa-automation uses this plugin as its active lint plugin (file:-installed
from the workspace); eslint-plugin-custom has been retired (QA-3745).
npm test --workspace @testgorilla/eslint-plugin-e2e # RuleTester suite
FAQs
TestGorilla e2e test conventions: tag enforcement, JIRA ticket validation (cross-repo aware), triage-tag exclusivity. Extracted from tgo-qa-automation's eslint-plugin-custom for reuse by repos that collocate their e2e suites.
We found that @testgorilla/eslint-plugin-e2e demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.