Skip to content

chore: patch vulnerability in vite (#1220) #388

chore: patch vulnerability in vite (#1220)

chore: patch vulnerability in vite (#1220) #388

name: 'Main Branch Check' # To be able to access test coverage of the repository on SonarCloud
on:
push:
branches: [v7]
env:
CI: 'true'
BROWSERSTACK_LATEST_BROWSERS_LAUNCHER: 'Playwright'
TEST_SSL_CERT: ${{ secrets.TEST_SSL_CERT }}
TEST_SSL_KEY: ${{ secrets.TEST_SSL_KEY }}
jobs:
build:
name: 'Build'
runs-on: ubuntu-latest
steps:
- name: Check out repository code
uses: actions/checkout@v4
with:
fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
- name: Setup resources and environment
uses: ./.github/actions/setup
id: setup
- name: Install Dependencies
run: npm ci --audit=false --fund=false
- name: Version
run: |
node -v
npm -v
- name: Build
run: npm run build
# Use coverage data from Chrome only
test-chrome:
name: 'Test / Chrome'
needs: build
runs-on: ubuntu-latest
steps:
- name: Check out repository code
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Test
uses: ./.github/actions/run-test
with:
browsers: 'chrome'
mode: 'all'
scan-sonarcloud:
name: Scan
needs: test-chrome
uses: ./.github/workflows/sonarcloud_scan.yml
secrets: inherit
scan-blackduck:
name: Scan
uses: ./.github/workflows/blackduck_scan.yml
with:
target: Production
secrets: inherit
scan-semgrep:
name: Scan
uses: ./.github/workflows/semgrep_scan.yml
with:
verbose: false
secrets: inherit