autorelease-gitlab
Advanced tools
+76
| 'use strict'; | ||
| var lodash = require('lodash'); | ||
| var babelHelpers = {}; | ||
| babelHelpers.asyncToGenerator = function (fn) { | ||
| return function () { | ||
| var gen = fn.apply(this, arguments); | ||
| return new Promise(function (resolve, reject) { | ||
| function step(key, arg) { | ||
| try { | ||
| var info = gen[key](arg); | ||
| var value = info.value; | ||
| } catch (error) { | ||
| reject(error); | ||
| return; | ||
| } | ||
| if (info.done) { | ||
| resolve(value); | ||
| } else { | ||
| return Promise.resolve(value).then(function (value) { | ||
| return step("next", value); | ||
| }, function (err) { | ||
| return step("throw", err); | ||
| }); | ||
| } | ||
| } | ||
| return step("next"); | ||
| }); | ||
| }; | ||
| }; | ||
| babelHelpers; | ||
| var verifyCi = function () { | ||
| var ref = babelHelpers.asyncToGenerator(function* (r, _ref) { | ||
| let branch = _ref.branch; | ||
| if (process.env.GITLAB_CI !== "true") { | ||
| throw new Error("This is not running on Gitlab CI and therefore a new version won't be published."); | ||
| } | ||
| // Gitlab does not run builds on merge requests yet | ||
| // https://gitlab.com/gitlab-org/gitlab-ce/issues/4176 | ||
| // if (has(process.env, "TRAVIS_PULL_REQUEST") && process.env.TRAVIS_PULL_REQUEST !== "false") { | ||
| // throw new Error("This test run was triggered by a pull request and therefore a new version won't be published."); | ||
| // } | ||
| if (process.env.CI_BUILD_TAG) { | ||
| throw new Error("This test run was triggered by a git tag and therefore a new version won't be published."); | ||
| } | ||
| let current = process.env.CI_BUILD_REF_NAME; | ||
| let pass = [].concat(branch).some(function (b) { | ||
| if (lodash.isRegExp(b)) { | ||
| return b.test(current); | ||
| } else if (typeof b === "string") { | ||
| return current === b; | ||
| } else if (typeof b === "function") { | ||
| return b(current); | ||
| } | ||
| }); | ||
| if (!pass) { | ||
| throw new Error(`This autorelease was triggered on branch ${ current }, which is not a branch autorelease is configured to publish from.`); | ||
| } | ||
| }); | ||
| return function (_x, _x2) { | ||
| return ref.apply(this, arguments); | ||
| }; | ||
| }(); | ||
| module.exports = verifyCi; |
| 'use strict'; | ||
| var babelHelpers = {}; | ||
| babelHelpers.asyncToGenerator = function (fn) { | ||
| return function () { | ||
| var gen = fn.apply(this, arguments); | ||
| return new Promise(function (resolve, reject) { | ||
| function step(key, arg) { | ||
| try { | ||
| var info = gen[key](arg); | ||
| var value = info.value; | ||
| } catch (error) { | ||
| reject(error); | ||
| return; | ||
| } | ||
| if (info.done) { | ||
| resolve(value); | ||
| } else { | ||
| return Promise.resolve(value).then(function (value) { | ||
| return step("next", value); | ||
| }, function (err) { | ||
| return step("throw", err); | ||
| }); | ||
| } | ||
| } | ||
| return step("next"); | ||
| }); | ||
| }; | ||
| }; | ||
| babelHelpers; | ||
| var verifyToken = function () { | ||
| var ref = babelHelpers.asyncToGenerator(function* (r, _ref) { | ||
| let gitlabToken = _ref.gitlabToken; | ||
| let pkg = _ref.package; | ||
| if (!pkg.repository || !pkg.repository.url) { | ||
| throw new Error(`No "repository" found in package.json.`); | ||
| } | ||
| if (!gitlabToken && !process.env.GL_TOKEN) { | ||
| throw new Error("No gitlab token specified."); | ||
| } | ||
| }); | ||
| return function (_x, _x2) { | ||
| return ref.apply(this, arguments); | ||
| }; | ||
| }(); | ||
| module.exports = verifyToken; |
+2
-2
@@ -31,3 +31,3 @@ { | ||
| "babel-plugin-transform-object-rest-spread": "^6.6.4", | ||
| "eslint": "^2.2.0", | ||
| "eslint": "~2.2.0", | ||
| "rollup": "^0.25.4", | ||
@@ -37,3 +37,3 @@ "rollup-plugin-babel": "^2.4.0", | ||
| }, | ||
| "version": "1.0.2" | ||
| "version": "2.0.0" | ||
| } |
-86
| 'use strict'; | ||
| var lodash = require('lodash'); | ||
| var babelHelpers = {}; | ||
| babelHelpers.asyncToGenerator = function (fn) { | ||
| return function () { | ||
| var gen = fn.apply(this, arguments); | ||
| return new Promise(function (resolve, reject) { | ||
| function step(key, arg) { | ||
| try { | ||
| var info = gen[key](arg); | ||
| var value = info.value; | ||
| } catch (error) { | ||
| reject(error); | ||
| return; | ||
| } | ||
| if (info.done) { | ||
| resolve(value); | ||
| } else { | ||
| return Promise.resolve(value).then(function (value) { | ||
| return step("next", value); | ||
| }, function (err) { | ||
| return step("throw", err); | ||
| }); | ||
| } | ||
| } | ||
| return step("next"); | ||
| }); | ||
| }; | ||
| }; | ||
| babelHelpers; | ||
| var verify = function () { | ||
| var ref = babelHelpers.asyncToGenerator(function* (r, _ref) { | ||
| let branch = _ref.branch; | ||
| let gitlabToken = _ref.gitlabToken; | ||
| let pkg = _ref.package; | ||
| if (process.env.GITLAB_CI !== "true") { | ||
| throw new Error("This is not running on Gitlab CI and therefore a new version won't be published."); | ||
| } | ||
| // Gitlab does not run builds on merge requests yet | ||
| // https://gitlab.com/gitlab-org/gitlab-ce/issues/4176 | ||
| // if (has(process.env, "TRAVIS_PULL_REQUEST") && process.env.TRAVIS_PULL_REQUEST !== "false") { | ||
| // throw new Error("This test run was triggered by a pull request and therefore a new version won't be published."); | ||
| // } | ||
| if (process.env.CI_BUILD_TAG) { | ||
| throw new Error("This test run was triggered by a git tag and therefore a new version won't be published."); | ||
| } | ||
| let current = process.env.CI_BUILD_REF_NAME; | ||
| let pass = [].concat(branch).some(function (b) { | ||
| if (lodash.isRegExp(b)) { | ||
| return b.test(current); | ||
| } else if (typeof b === "string") { | ||
| return current === b; | ||
| } else if (typeof b === "function") { | ||
| return b(current); | ||
| } | ||
| }); | ||
| if (!pass) { | ||
| throw new Error(`This autorelease was triggered on branch ${ current }, which is not a branch autorelease is configured to publish from.`); | ||
| } | ||
| if (!pkg.repository || !pkg.repository.url) { | ||
| throw new Error(`No "repository" found in package.json.`); | ||
| } | ||
| if (!gitlabToken && !process.env.GL_TOKEN) { | ||
| throw new Error("No gitlab token specified."); | ||
| } | ||
| }); | ||
| return function (_x, _x2) { | ||
| return ref.apply(this, arguments); | ||
| }; | ||
| }(); | ||
| module.exports = verify; |
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 7 instances in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 7 instances in 1 package
9069
11.58%6
20%213
20.34%