improve sbom generation #142
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Checks | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| setup: | |
| name: Setup | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20.11.0 | |
| cache: 'npm' | |
| cache-dependency-path: | | |
| dependencies/package-lock.json | |
| package-lock.json | |
| - name: install @lastui/rocker dependencies | |
| run: npm ci --no-fund --no-audit | |
| - name: install @lastui/dependencies dependencies | |
| working-directory: dependencies | |
| run: npm ci --no-fund --no-audit | |
| compile: | |
| name: Compile | |
| needs: setup | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20.11.0 | |
| cache: 'npm' | |
| cache-dependency-path: | | |
| dependencies/package-lock.json | |
| package-lock.json | |
| - run: npm ci --no-fund --no-audit --prefer-offline --prefix=dependencies | |
| - run: npm ci --no-fund --no-audit --prefer-offline | |
| - run: npm run build:dependencies | |
| - run: npm run build:platform | |
| - run: npm run build:bootstrap | |
| - run: npm run postbuild | |
| - name: Cache workspace | |
| id: cache | |
| uses: actions/cache/save@v4 | |
| with: | |
| path: | | |
| dependencies/index.js | |
| dependencies/sbom.json | |
| dependencies/dll | |
| platform/dll | |
| bootstrap/dll | |
| key: cache-${{ github.sha }}-dlls | |
| test: | |
| name: Test | |
| needs: setup | |
| permissions: | |
| checks: write | |
| pull-requests: write | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20.11.0 | |
| cache: 'npm' | |
| cache-dependency-path: | | |
| dependencies/package-lock.json | |
| package-lock.json | |
| - run: npm ci --no-fund --no-audit --prefer-offline --prefix=dependencies | |
| - run: npm ci --no-fund --no-audit --prefer-offline | |
| - name: Test package platform | |
| working-directory: platform | |
| run: node ../cli/index.js test | |
| - name: Collect coverage for platform | |
| uses: codecov/codecov-action@v4 | |
| env: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| with: | |
| fail_ci_if_error: true | |
| flags: unittests | |
| file: platform/coverage/clover.xml | |
| - name: Test package bootstrap | |
| working-directory: bootstrap | |
| run: node ../cli/index.js test | |
| - name: Collect coverage for bootstrap | |
| uses: codecov/codecov-action@v4 | |
| env: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| with: | |
| fail_ci_if_error: true | |
| flags: unittests | |
| file: bootstrap/coverage/clover.xml | |
| lint: | |
| name: Lint | |
| needs: setup | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20.11.0 | |
| cache: 'npm' | |
| cache-dependency-path: | | |
| dependencies/package-lock.json | |
| package-lock.json | |
| - run: npm ci --no-fund --no-audit --prefer-offline --prefix=dependencies | |
| - run: npm ci --no-fund --no-audit --prefer-offline | |
| - run: npm run lint -- --debug | |