mirror of
https://github.com/Alfresco/alfresco-ng2-components.git
synced 2026-09-02 17:53:30 +00:00
7b8d616a9f
* fix: enable LCOV coverage reporting for SonarCloud Add lcov reporter to all karma configs, upload coverage artifacts from unit test matrix jobs, and add a SonarCloud scan job that merges coverage reports and runs the sonar-scanner with proper LCOV paths. Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * fix: pass secrets to unit-test-workflow and set SONAR_HOST_URL for SonarCloud Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> * fix: add test outputs to nx.json so NX caches and restores coverage reports Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> * test: add unit tests for Chart model to verify coverage reporting * fix: use find to locate lcov.info in downloaded artifacts for SonarCloud coverage Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> * test: add fake file with unit test to verify coverage reporting Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> * ci: add full SonarCloud scan workflow on develop push Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> * test: remove fake coverage-canary file and its spec Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> * fix: replace secrets inherit with explicit SONAR_TOKEN in workflow call Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: eromano <1030050+eromano@users.noreply.github.com> Co-authored-by: Eugenio Romano <eromano@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Alfresco Application Development Framework (ADF)
Introduction
See the introduction page in our documentation for an overview of ADF along with links to useful starting points.
Prerequisites
Node: 18.x
NPM: 9.x
Also, check out the tutorial: Creating your first ADF Application for full details on what you may need to install before using ADF.
See also
Installation
This project uses pnpm for package management with built-in supply chain attack protection.
pnpm install # install all packages
pnpm run add <package> # add a new package (with security check)
Supply Chain Security
Layer 1: pnpm script blocking
- All lifecycle scripts (postinstall, etc.) are blocked by default
- Only trusted packages in
pnpm-workspace.yamlcan run scripts - Protects during
pnpm installandpnpm add
Layer 2: Security database check
pnpm run addchecks packages against OSV and GitHub Advisory databases BEFORE installing- Pre-commit hook blocks commits containing known malicious packages
Layer 3: npm blocked
- Running
npm installwill fail - enforces pnpm usage
Components
You can find the sources for all ADF components in the lib folder.
Libraries
ADF Libraries list:
Browser Support
All components are supported in the following browsers:
| Browser | Version |
|---|---|
| Chrome | Latest |
| Safari | Latest |
| Firefox | Latest |
| Edge | Latest |