[ACS-10100][Security] Remove npx usage from CI/CD and shell scripts to mitigate supply chain risks (#4795)

This commit is contained in:
dominikiwanekhyland
2025-09-16 10:12:28 +02:00
committed by GitHub
parent ccc08db8a4
commit 66720be7c0
28 changed files with 184 additions and 42 deletions
+4 -5
View File
@@ -55,7 +55,7 @@ jobs:
run: npm run affected:lint -- --base=origin/develop
- name: lint all
if: ${{ github.event_name != 'pull_request' }}
run: npx nx run-many --target=lint
run: npm run ci:lint
- run: npm run stylelint
build:
@@ -80,7 +80,7 @@ jobs:
with:
name: npm-logs
path: /home/runner/.npm/_logs/
- run: npx nx build aca-playwright-shared
- run: npm run ci:build -- aca-playwright-shared
- run: npm run build -- $BUILD_OPTS
- name: dist cache
@@ -119,7 +119,7 @@ jobs:
- name: Test all
if: ${{ github.event_name != 'pull_request' }}
run: npx nx run-many --target=test --browsers=ChromeHeadless --watch=false $TEST_OPTS
run: npm run ci:test -- $TEST_OPTS
e2es-playwright:
needs: [lint, build, unit-tests]
@@ -203,8 +203,7 @@ jobs:
uses: ./.github/actions/before-e2e
- name: Before playwright
shell: bash
run: npx playwright install chromium
run: npm run ci:playwright:install
- uses: ./.github/actions/run-e2e-playwright
with:
+3 -3
View File
@@ -45,7 +45,7 @@ jobs:
cache: 'npm'
- uses: ./.github/actions/before-install
- run: npm ci
- run: npx nx build aca-playwright-shared
- run: npm run ci:build -- aca-playwright-shared
- run: npm run build -- $BUILD_OPTS
- name: dist cache
@@ -128,12 +128,12 @@ jobs:
uses: ./.github/actions/before-e2e
- name: Before playwright
shell: bash
run: npx playwright install chromium
run: npm run ci:playwright:install
- uses: ./.github/actions/run-e2e-playwright
with:
options: "${{ matrix.e2e-suites.name }}"
artifact-name: ${{ matrix.e2e-suites.name }}
test-runner: playwright
- uses: ./.github/actions/after-e2e