Compare commits
4
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
ba05fe88b3 | ||
|
|
cc3664454a | ||
|
|
c70339972a | ||
|
|
711c9e00c3 |
No files matched your search
@@ -22,7 +22,7 @@ jobs:
|
|||||||
policy:
|
policy:
|
||||||
name: policy
|
name: policy
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: node:24.21.0
|
container: node:24.22.0
|
||||||
defaults:
|
defaults:
|
||||||
run:
|
run:
|
||||||
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
||||||
@@ -45,7 +45,7 @@ jobs:
|
|||||||
validate:
|
validate:
|
||||||
name: validate
|
name: validate
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: node:24.21.0
|
container: node:24.22.0
|
||||||
defaults:
|
defaults:
|
||||||
run:
|
run:
|
||||||
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
||||||
@@ -63,7 +63,7 @@ jobs:
|
|||||||
test:
|
test:
|
||||||
name: test
|
name: test
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: node:24.21.0
|
container: node:24.22.0
|
||||||
defaults:
|
defaults:
|
||||||
run:
|
run:
|
||||||
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
||||||
@@ -93,7 +93,7 @@ jobs:
|
|||||||
name: benchmark
|
name: benchmark
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container:
|
container:
|
||||||
image: node:24.21.0
|
image: node:24.22.0
|
||||||
options: --memory=3g
|
options: --memory=3g
|
||||||
defaults:
|
defaults:
|
||||||
run:
|
run:
|
||||||
@@ -112,7 +112,7 @@ jobs:
|
|||||||
build:
|
build:
|
||||||
name: build
|
name: build
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: node:24.21.0
|
container: node:24.22.0
|
||||||
defaults:
|
defaults:
|
||||||
run:
|
run:
|
||||||
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
||||||
@@ -134,7 +134,7 @@ jobs:
|
|||||||
security:
|
security:
|
||||||
name: security
|
name: security
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: node:24.21.0
|
container: node:24.22.0
|
||||||
steps:
|
steps:
|
||||||
- uses: https://gitea.com/actions/checkout@v7
|
- uses: https://gitea.com/actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
@@ -221,7 +221,7 @@ jobs:
|
|||||||
if: ${{ always() }}
|
if: ${{ always() }}
|
||||||
needs: [policy, validate, test, benchmark, build, security, images]
|
needs: [policy, validate, test, benchmark, build, security, images]
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: node:24.21.0
|
container: node:24.22.0
|
||||||
env:
|
env:
|
||||||
CHECK_RESULTS: ${{ needs.policy.result }} ${{ needs.validate.result }} ${{ needs.test.result }} ${{ needs.benchmark.result }} ${{ needs.build.result }} ${{ needs.security.result }}
|
CHECK_RESULTS: ${{ needs.policy.result }} ${{ needs.validate.result }} ${{ needs.test.result }} ${{ needs.benchmark.result }} ${{ needs.build.result }} ${{ needs.security.result }}
|
||||||
IMAGE_RESULT: ${{ needs.images.result }}
|
IMAGE_RESULT: ${{ needs.images.result }}
|
||||||
|
|||||||
@@ -41,7 +41,7 @@ branch slug; stable promotions share one group and are not cancelled in progress
|
|||||||
|
|
||||||
## Runners and permissions
|
## Runners and permissions
|
||||||
|
|
||||||
Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.21.0. The image
|
Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.22.0. The image
|
||||||
job uses Docker 29.9.1 and its matching Docker-in-Docker service. Scanner
|
job uses Docker 29.9.1 and its matching Docker-in-Docker service. Scanner
|
||||||
versions are Semgrep 1.180.0 and Trivy 0.75.0; Trivy downloads are checksum-checked.
|
versions are Semgrep 1.180.0 and Trivy 0.75.0; Trivy downloads are checksum-checked.
|
||||||
Trivy downloads its vulnerability database from Aqua's public ECR mirror because
|
Trivy downloads its vulnerability database from Aqua's public ECR mirror because
|
||||||
|
|||||||
Reference in new issue
Block a user