inteligr8/alfresco-content-app
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-content-app.git synced 2026-09-09 18:02:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

[ACS-10100][Security] Remove npx usage from CI/CD and shell scripts to mitigate supply chain risks (#4795)

Browse Source
This commit is contained in:
dominikiwanekhyland
2025-09-16 10:12:28 +02:00
committed by GitHub
parent ccc08db8a4
commit 66720be7c0
28 changed files with 184 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/pull-request.yml
+4 -5
View File
@@ -55,7 +55,7 @@ jobs:
run: npm run affected:lint -- --base=origin/develop
- name: lint all
if: ${{ github.event_name != 'pull_request' }}
run: npx nx run-many --target=lint
run: npm run ci:lint
- run: npm run stylelint
build:
@@ -80,7 +80,7 @@ jobs:
with:
name: npm-logs
path: /home/runner/.npm/_logs/
- run: npx nx build aca-playwright-shared
- run: npm run ci:build -- aca-playwright-shared
- run: npm run build -- $BUILD_OPTS
- name: dist cache
@@ -119,7 +119,7 @@ jobs:
- name: Test all
if: ${{ github.event_name != 'pull_request' }}
run: npx nx run-many --target=test --browsers=ChromeHeadless --watch=false $TEST_OPTS
run: npm run ci:test -- $TEST_OPTS
e2es-playwright:
needs: [lint, build, unit-tests]
@@ -203,8 +203,7 @@ jobs:
uses: ./.github/actions/before-e2e
- name: Before playwright
shell: bash
run: npx playwright install chromium
run: npm run ci:playwright:install
- uses: ./.github/actions/run-e2e-playwright
with: