Compare commits
4
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
ba05fe88b3 | ||
|
|
cc3664454a | ||
|
|
c70339972a | ||
|
|
711c9e00c3 |
No files matched your search
@@ -22,7 +22,7 @@ jobs:
|
||||
policy:
|
||||
name: policy
|
||||
runs-on: ubuntu-latest
|
||||
container: node:24.21.0
|
||||
container: node:24.22.0
|
||||
defaults:
|
||||
run:
|
||||
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
||||
@@ -45,7 +45,7 @@ jobs:
|
||||
validate:
|
||||
name: validate
|
||||
runs-on: ubuntu-latest
|
||||
container: node:24.21.0
|
||||
container: node:24.22.0
|
||||
defaults:
|
||||
run:
|
||||
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
||||
@@ -63,7 +63,7 @@ jobs:
|
||||
test:
|
||||
name: test
|
||||
runs-on: ubuntu-latest
|
||||
container: node:24.21.0
|
||||
container: node:24.22.0
|
||||
defaults:
|
||||
run:
|
||||
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
||||
@@ -93,7 +93,7 @@ jobs:
|
||||
name: benchmark
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: node:24.21.0
|
||||
image: node:24.22.0
|
||||
options: --memory=3g
|
||||
defaults:
|
||||
run:
|
||||
@@ -112,7 +112,7 @@ jobs:
|
||||
build:
|
||||
name: build
|
||||
runs-on: ubuntu-latest
|
||||
container: node:24.21.0
|
||||
container: node:24.22.0
|
||||
defaults:
|
||||
run:
|
||||
shell: env PATH=/opt/bun/bin:/usr/bin:/bin bash -e {0}
|
||||
@@ -134,7 +134,7 @@ jobs:
|
||||
security:
|
||||
name: security
|
||||
runs-on: ubuntu-latest
|
||||
container: node:24.21.0
|
||||
container: node:24.22.0
|
||||
steps:
|
||||
- uses: https://gitea.com/actions/checkout@v7
|
||||
with:
|
||||
@@ -221,7 +221,7 @@ jobs:
|
||||
if: ${{ always() }}
|
||||
needs: [policy, validate, test, benchmark, build, security, images]
|
||||
runs-on: ubuntu-latest
|
||||
container: node:24.21.0
|
||||
container: node:24.22.0
|
||||
env:
|
||||
CHECK_RESULTS: ${{ needs.policy.result }} ${{ needs.validate.result }} ${{ needs.test.result }} ${{ needs.benchmark.result }} ${{ needs.build.result }} ${{ needs.security.result }}
|
||||
IMAGE_RESULT: ${{ needs.images.result }}
|
||||
|
||||
@@ -41,7 +41,7 @@ branch slug; stable promotions share one group and are not cancelled in progress
|
||||
|
||||
## Runners and permissions
|
||||
|
||||
Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.21.0. The image
|
||||
Every job that runs project commands uses Bun 1.4.3 with the frozen lockfile (see [Bun toolchain and Node](#bun-toolchain-and-node)). Job containers stay on Node 24.22.0. The image
|
||||
job uses Docker 29.9.1 and its matching Docker-in-Docker service. Scanner
|
||||
versions are Semgrep 1.180.0 and Trivy 0.75.0; Trivy downloads are checksum-checked.
|
||||
Trivy downloads its vulnerability database from Aqua's public ECR mirror because
|
||||
|
||||
Reference in new issue
Block a user