This repository was archived by the owner on Aug 20, 2025. It is now read-only.
Merge pull request #36 from mercedes-benz/bugfix/fix-link-to-vulnerab… #58
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches-ignore: | |
| # we do NOT build the documentation branch, because here we only copy build output | |
| # of documentation from master branch to the corresponding doc folders -e.g. /docs/latest | |
| # So this branch is only for github pages. | |
| - documentation | |
| # We ignore everything where tag starts with v* - this is done by release build! | |
| tags-ignore: | |
| - v* | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| node: [ 16, 18 ] | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| # Matrix test using LTS (Long Term Support) versions | |
| node-version: ${{ matrix.node }} | |
| - run: npm ci | |
| # https://code.visualstudio.com/api/working-with-extensions/continuous-integration#github-actions | |
| - run: xvfb-run -a npm test | |
| if: runner.os == 'Linux' | |
| - run: npm test | |
| if: runner.os != 'Linux' | |
| - name: Fetch version from package.json | |
| id: version | |
| uses: notiz-dev/github-action-json-property@release | |
| with: | |
| path: 'package.json' | |
| prop_path: 'version' | |
| - name: "Show version: v${{ steps.version.outputs.prop }}" | |
| run: echo v${{ steps.version.outputs.prop }} | |
| # - name: License check | |
| # uses: blackducksoftware/[email protected] | |
| # env: | |
| # SYNOPSYS_SKIP_PHONE_HOME: true | |
| # with: | |
| # args: | | |
| # '--blackduck.url="${{ secrets.BLACKDUCK_URL}}" \ | |
| # --detect.project.name="${{ secrets.BLACKDUCK_PROJECT_NAME }}" \ | |
| # --detect.npm.include.dev.dependencies=false \ | |
| # --blackduck.api.token="${{ secrets.BLACKDUCK_API_TOKEN }}-ci" \ | |
| # --detect.excluded.detector.types=GIT \ | |
| # --detect.policy.check.fail.on.severities=CRITICAL \ | |
| # --detect.project.version.name="${{ steps.version.outputs.prop }}" \ | |
| # --detect.detector.search.depth=3 \ | |
| # --detect.blackduck.signature.scanner.exclusion.name.pattern=.git,node_modules,.vscode-test \ | |
| # ' |