
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
flight-hub-sqs
Advanced tools
This workflow is used to upload your node artifact or dependency into the codeartifact repository.
Call directly from your workflow file like:
jobs:
NODE:
uses: Iberia-Ent/software-engineering--workflow--node--ci--cd-codeartifact/.github/workflows/ci-cd-node-codeartifact.yml@v1.0
secrets: inherit
You need to create the following environments in your repository:
Production: We recommend to insert a reviewers to approve the deployment in this environment until your team is sufficiently mature.On your repository, go to Settings > Secrets and Variables and add the following variables (repository scope):
CODEQL_LANGUAGES: This variable is used to set the languages to analyze with CodeQL. Example: javascriptRUNNER_GROUP: This variable is used to set your runner group. Example: my-group-runnerRUNNER_LABELS: This variable is used to set the runner labels. Example: "node", 'node', ["label1","label2"], ['label1','label2']DEPLOY_GITHUB_PAGES: This variable is used to deploy your static code to github pages. Values: true | falseYou will use the github flow, so you need to have the following branches:
Add some rules to main, develop and staging branch to make sure that you follow the flow and anyone can deploy in environments like preproduction or production.
main:
features:
Require status checks to pass before merging and chech "Require branches to be up to date before merging" option and also add the status check of your pipeline for example: Initialize Environment, Continous Integration)
[!NOTE] For adding the status checks you should add them into pipeline code otherwise you couldn´t see it in rule branch section.
You will use the github flow for building and uploading the distribution package.
You should have these files:
You can modify these files:
Find the variables that you need to set up in the ci-config.json file:
| Variable | Required | Type |
|---|---|---|
| AWS_RESOURCES_COMMON_ACCOUNT_ID | yes | string |
| AWS_RESOURCES_COMMON_DOMAIN | yes | string |
| AWS_RESOURCES_COMMON_LIBRARY_REPOSITORY_FORMAT | yes | string |
| AWS_RESOURCES_COMMON_LIBRARY_REPOSITORY_NAME | yes | string |
| AWS_ECR_IMAGE_BASE | yes | string |
| AWS_ECR_REGISTRY | yes | string |
| AWS_ECR_REPOSITORY_NAME | yes | string |
| AWS_REGION | yes | string |
| NODE_VERSION | yes | string |
| S3_DEPLOY_BUCKET_REPOSITORY_NAME | yes | string |
| S3_PACKAGE_DISTRIBUTION_FORMAT | yes | string |
| S3_RELEASE_BUCKET_REPOSITORY_NAME | yes | string |
For setting up the ci-config.json file with your custom properties of your project, go to your working feature branch and make the changes that you need using the above variables for example:
{
"release": {
"AWS_RESOURCES_COMMON_ACCOUNT_ID": "858599873024",
"AWS_RESOURCES_COMMON_DOMAIN": "iberia",
"AWS_RESOURCES_COMMON_LIBRARY_REPOSITORY_FORMAT": "npm",
"AWS_RESOURCES_COMMON_LIBRARY_REPOSITORY_NAME": "npm-library-store",
"AWS_ECR_IMAGE_BASE": "NA",
"AWS_ECR_REGISTRY": "NA",
"AWS_ECR_REPOSITORY_NAME": "NA",
"AWS_REGION": "eu-west-1",
"NODE_VERSION": "18.x",
"S3_DEPLOY_BUCKET_REPOSITORY_NAME": "NA",
"S3_PACKAGE_DISTRIBUTION_FORMAT": "zip",
"S3_RELEASE_BUCKET_REPOSITORY_NAME": "node-codeartifact-store-test"
}
}
If you want to deploy your static content in github pages, you should add the following code in your workflow file:
"scripts": {
...
"build:gh-pages": "storybook build",
...
}
Create a working branch like feat/my-branch and insert and upload your code to the remote working branch.
Create a "Pull Request", select base branch: features and compare branch: feat/my-branch (working feature branch created for yourself).
Confirm your changes and the merge request.
Go to the "Action" tab and see if it has finished sucessfully or not and check the tag created automatically because you should create the release from that tag.
For uploading the artifact to the codeartifact repository, go to "tags" tab and create the release. Click in the "Generate release note" button and automatically will fill up the release. Add some detail in the tittle and description like:
Tittle: v1.0.0 - Added new code
Descrition: This is my first commit.
Go to "Actions" tab and see the status of the workflow, if it was sucessfully, your libraries are in production repository.
Create a "Pull Request" like:
Delete your custom branch. Example: feat/my-branch
Briefly explains how your team members or others can contribute to the project
For the contribution and workflow guide, see CONTRIBUTING.md.
Contact information of the team member whose is responsible for the project, see CONTRIBUTING.md.
FAQs
## Summary
We found that flight-hub-sqs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.