diff --git a/.github/workflows/release-production-plugins.yml b/.github/workflows/release-production-plugins.yml index fe2434c8b..0758cd4b7 100644 --- a/.github/workflows/release-production-plugins.yml +++ b/.github/workflows/release-production-plugins.yml @@ -29,6 +29,8 @@ jobs: - name: Install root dependencies run: pnpm install --no-frozen-lockfile + - name: Install ggshield + run: pipx install ggshield - name: Build all plugins run: pnpm -r --sort run build @@ -47,6 +49,8 @@ jobs: package: ./packages/contentstack-asset-management/package.json access: public tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Variants - name: Publishing variants (Production) @@ -55,6 +59,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-variants/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Export - name: Publishing export (Production) @@ -63,6 +69,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-export/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Audit - name: Publishing audit (Production) @@ -71,6 +79,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-audit/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Import - name: Publishing import (Production) @@ -79,6 +89,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-import/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Clone - name: Publishing clone (Production) @@ -87,6 +99,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-clone/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Import Setup - name: Publishing import-setup (Production) @@ -95,6 +109,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-import-setup/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Export to CSV - name: Publishing export-to-csv (Production) @@ -103,6 +119,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-export-to-csv/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Migration - name: Publishing migration (Production) @@ -111,6 +129,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-migration/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Migrate RTE - name: Publishing migrate-rte (Production) @@ -120,6 +140,8 @@ jobs: package: ./packages/contentstack-migrate-rte/package.json access: public tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Seed - name: Publishing seed (Production) @@ -128,6 +150,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-seed/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Bootstrap - name: Publishing bootstrap (Production) @@ -136,6 +160,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-bootstrap/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Branches - name: Publishing branches (Production) @@ -144,6 +170,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-branches/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Apps CLI - name: Publishing apps-cli (Production) @@ -152,6 +180,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-apps-cli/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Query Export - name: Publishing query-export (Production) @@ -160,6 +190,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-query-export/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Content Type - name: Publishing content-type (Production) @@ -168,6 +200,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-content-type/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Regex Validate - name: Publishing regex-validate (Production) @@ -177,6 +211,8 @@ jobs: package: ./packages/contentstack-cli-cm-regex-validate/package.json access: public tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Tsgen - name: Publishing tsgen (Production) @@ -185,6 +221,8 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-cli-tsgen/package.json tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # External Migrate - name: Publishing external-migrate (Production) @@ -194,6 +232,8 @@ jobs: package: ./packages/contentstack-external-migrate/package.json access: public tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} # Bulk Operations - name: Publishing bulk-operations (Production) @@ -202,4 +242,6 @@ jobs: token: ${{ secrets.NPM_TOKEN }} package: ./packages/contentstack-bulk-operations/package.json access: public - tag: latest \ No newline at end of file + tag: latest + env: + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} \ No newline at end of file diff --git a/.gitignore b/.gitignore index 5f12fba08..9f9173e94 100644 --- a/.gitignore +++ b/.gitignore @@ -25,4 +25,5 @@ snyk_output.log .cursor/rules/snyk_rules.mdc **/migration-logs **/migration-logs/** -*.logs \ No newline at end of file +*.logs +.cache_ggshield diff --git a/packages/contentstack-apps-cli/package.json b/packages/contentstack-apps-cli/package.json index fcdb74058..a72a1f6b0 100644 --- a/packages/contentstack-apps-cli/package.json +++ b/packages/contentstack-apps-cli/package.json @@ -82,7 +82,7 @@ "scripts": { "build": "pnpm compile", "lint": "eslint \"src/**/*.ts\"", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "test": "mocha --forbid-only \"test/unit/**/*.test.ts\"", "version": "oclif readme && git add README.md", diff --git a/packages/contentstack-asset-management/package.json b/packages/contentstack-asset-management/package.json index 99bbb6e7d..9fee37eda 100644 --- a/packages/contentstack-asset-management/package.json +++ b/packages/contentstack-asset-management/package.json @@ -12,7 +12,7 @@ "build": "pnpm compile && oclif manifest && oclif readme", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "version": "oclif readme && git add README.md", "lint": "eslint \"src/**/*.ts\"", diff --git a/packages/contentstack-audit/package.json b/packages/contentstack-audit/package.json index 4da04ff3d..855dd38b1 100644 --- a/packages/contentstack-audit/package.json +++ b/packages/contentstack-audit/package.json @@ -66,7 +66,7 @@ "scripts": { "build": "pnpm compile && oclif manifest && oclif readme", "lint": "eslint \"src/**/*.ts\"", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "compile": "tsc -b tsconfig.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "test": "mocha --timeout 10000 --forbid-only --file test/unit/logger-config.js \"test/unit/**/*.test.ts\"", diff --git a/packages/contentstack-bootstrap/package.json b/packages/contentstack-bootstrap/package.json index 056142f61..28fade36b 100644 --- a/packages/contentstack-bootstrap/package.json +++ b/packages/contentstack-bootstrap/package.json @@ -8,7 +8,7 @@ "build": "pnpm compile && oclif manifest && oclif readme", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "version": "oclif readme && git add README.md", "pretest": "pnpm compile", diff --git a/packages/contentstack-branches/package.json b/packages/contentstack-branches/package.json index 2aac1199e..8078bfb66 100644 --- a/packages/contentstack-branches/package.json +++ b/packages/contentstack-branches/package.json @@ -30,7 +30,7 @@ "build": "pnpm compile && oclif manifest && oclif readme", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "version": "oclif readme && git add README.md", "pretest": "tsc -p test", diff --git a/packages/contentstack-bulk-operations/package.json b/packages/contentstack-bulk-operations/package.json index c0560f0a8..df31316d4 100644 --- a/packages/contentstack-bulk-operations/package.json +++ b/packages/contentstack-bulk-operations/package.json @@ -81,7 +81,7 @@ "build": "pnpm compile && oclif manifest && oclif readme", "lint": "eslint \"src/**/*.ts\"", "format": "eslint \"src/**/*.ts\" --fix", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme && pnpm changelog", "changelog": "conventional-changelog -p angular -i CHANGELOG.md -s", "test": "mocha --forbid-only \"test/unit/**/*.test.ts\"", diff --git a/packages/contentstack-cli-cm-regex-validate/package.json b/packages/contentstack-cli-cm-regex-validate/package.json index 9a0d6ae41..06bf68a11 100644 --- a/packages/contentstack-cli-cm-regex-validate/package.json +++ b/packages/contentstack-cli-cm-regex-validate/package.json @@ -7,7 +7,7 @@ "scripts": { "build": "pnpm compile && oclif manifest && oclif readme", "prepack": "pnpm compile && oclif manifest && oclif readme", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "pretest": "tsc -p test", "test": "mocha --forbid-only \"test/**/*.test.ts\"", diff --git a/packages/contentstack-cli-tsgen/package.json b/packages/contentstack-cli-tsgen/package.json index d99fc4298..f79380f68 100644 --- a/packages/contentstack-cli-tsgen/package.json +++ b/packages/contentstack-cli-tsgen/package.json @@ -60,7 +60,7 @@ "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", "lint": "eslint \"src/**/*.ts\"", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "test": "jest --testPathPattern=test/unit", "test:integration": "jest --testPathPattern=test/integration", diff --git a/packages/contentstack-clone/package.json b/packages/contentstack-clone/package.json index 006e8f3a0..c5b2e392c 100644 --- a/packages/contentstack-clone/package.json +++ b/packages/contentstack-clone/package.json @@ -68,7 +68,7 @@ "build": "pnpm compile && oclif manifest && oclif readme", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "pretest": "tsc -p test", "lint": "eslint \"src/**/*.ts\"", diff --git a/packages/contentstack-content-type/package.json b/packages/contentstack-content-type/package.json index af3cc0208..b5486eeb9 100644 --- a/packages/contentstack-content-type/package.json +++ b/packages/contentstack-content-type/package.json @@ -68,7 +68,7 @@ "scripts": { "build": "pnpm compile && oclif manifest && oclif readme", "prepack": "pnpm compile && oclif manifest && oclif readme", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "test": "jest", "lint": "eslint \"src/**/*.ts\"", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", diff --git a/packages/contentstack-export-to-csv/package.json b/packages/contentstack-export-to-csv/package.json index 8cefc31ee..a50509ba7 100644 --- a/packages/contentstack-export-to-csv/package.json +++ b/packages/contentstack-export-to-csv/package.json @@ -70,7 +70,7 @@ "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", "lint": "eslint \"src/**/*.ts\"", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "test": "mocha --timeout 10000 --forbid-only \"test/unit/**/*.test.ts\"", "version": "oclif readme && git add README.md", diff --git a/packages/contentstack-export/package.json b/packages/contentstack-export/package.json index 938ef2cc7..daa69278f 100644 --- a/packages/contentstack-export/package.json +++ b/packages/contentstack-export/package.json @@ -49,7 +49,7 @@ "build": "pnpm compile && oclif manifest && oclif readme", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "version": "oclif readme && git add README.md", "pretest": "tsc -p test", diff --git a/packages/contentstack-external-migrate/package.json b/packages/contentstack-external-migrate/package.json index cac5efc60..f263c7fca 100644 --- a/packages/contentstack-external-migrate/package.json +++ b/packages/contentstack-external-migrate/package.json @@ -15,7 +15,7 @@ "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json && node scripts/copy-assets.js", "lint": "eslint \"src/**/*.ts\"", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "pretest": "tsc -p test", "test": "mocha --forbid-only \"test/**/*.test.ts\"", diff --git a/packages/contentstack-import-setup/package.json b/packages/contentstack-import-setup/package.json index 54b5213b4..2e88f2c2a 100644 --- a/packages/contentstack-import-setup/package.json +++ b/packages/contentstack-import-setup/package.json @@ -44,7 +44,7 @@ "build": "pnpm compile && oclif manifest && oclif readme", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "pretest": "tsc -p test", "lint": "eslint \"src/**/*.ts\"", diff --git a/packages/contentstack-import/package.json b/packages/contentstack-import/package.json index 025aa3a95..ec79ea064 100644 --- a/packages/contentstack-import/package.json +++ b/packages/contentstack-import/package.json @@ -46,7 +46,7 @@ "build": "pnpm compile && oclif manifest && oclif readme", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "version": "oclif readme && git add README.md", "pretest": "tsc -p test", diff --git a/packages/contentstack-migrate-rte/package.json b/packages/contentstack-migrate-rte/package.json index 43bf3a90f..c73446c08 100644 --- a/packages/contentstack-migrate-rte/package.json +++ b/packages/contentstack-migrate-rte/package.json @@ -72,7 +72,7 @@ }, "scripts": { "build": "oclif manifest", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "oclif manifest && oclif readme", "test": "nyc --check-coverage=false mocha --require test/setup.js --forbid-only \"test/**/*.test.js\"", "version": "oclif readme && git add README.md", diff --git a/packages/contentstack-migration/package.json b/packages/contentstack-migration/package.json index db247ba22..e1d155a97 100644 --- a/packages/contentstack-migration/package.json +++ b/packages/contentstack-migration/package.json @@ -60,7 +60,7 @@ }, "scripts": { "build": "pnpm compile && oclif manifest && oclif readme", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "generate-api-ref-md-doc": "nyc jsdoc2md ./src/modules/*.ts > ./docs/api-reference.md || true", "compile": "tsc -b tsconfig.json", "prepack": "pnpm compile && oclif manifest && oclif readme", diff --git a/packages/contentstack-query-export/package.json b/packages/contentstack-query-export/package.json index 00d3152ec..9dea7b163 100644 --- a/packages/contentstack-query-export/package.json +++ b/packages/contentstack-query-export/package.json @@ -52,7 +52,7 @@ "build": "pnpm compile && pnpm copy-config && oclif manifest && oclif readme", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", "compile": "tsc -b tsconfig.json", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "copy-config": "cp -r src/config lib/", "prepack": "pnpm compile && pnpm copy-config && oclif manifest && oclif readme", "version": "oclif readme && git add README.md", diff --git a/packages/contentstack-seed/package.json b/packages/contentstack-seed/package.json index 176d2917f..83244a500 100644 --- a/packages/contentstack-seed/package.json +++ b/packages/contentstack-seed/package.json @@ -68,7 +68,7 @@ }, "scripts": { "test": "jest", - "postpack": "rm -f oclif.manifest.json", + "postpack": "ggshield secret scan archive ./*.tgz && rm -f oclif.manifest.json", "prepack": "pnpm compile && oclif manifest && oclif readme", "version": "oclif readme && git add README.md", "clean": "rm -rf ./lib ./node_modules tsconfig.tsbuildinfo oclif.manifest.json", diff --git a/packages/contentstack-variants/package.json b/packages/contentstack-variants/package.json index ba77090de..242e523c4 100644 --- a/packages/contentstack-variants/package.json +++ b/packages/contentstack-variants/package.json @@ -5,7 +5,8 @@ "main": "lib/index.js", "types": "lib/index.d.ts", "scripts": { - "build": "pnpm compile", + "postpack": "ggshield secret scan archive ./*.tgz", + "build": "pnpm compile", "prepack": "pnpm compile", "compile": "tsc -b tsconfig.json", "test": "mocha --forbid-only \"test/unit/**/*.test.ts\"",