chore: Update SECURITY.md #2701
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish & Install | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - major | |
| - minor | |
| - parallel-e2e | |
| pull_request: | |
| branches: | |
| - master | |
| - major | |
| - minor | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| publish_install: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: [ubuntu-latest, windows-latest] | |
| node-version: [18.x, 20.x] | |
| fail-fast: false | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Use Node.js ${{ matrix.node-version }} | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| - name: Install Verdaccio | |
| run: | | |
| npm install -g verdaccio | |
| npm install -g wait-on | |
| tmp_registry_log=`mktemp` | |
| mkdir -p $HOME/.config/verdaccio | |
| cp -v ./.github/workflows/verdaccio/config.yaml $HOME/.config/verdaccio/config.yaml | |
| nohup verdaccio --config $HOME/.config/verdaccio/config.yaml & | |
| wait-on http://localhost:4873 | |
| TOKEN_RES=$(curl -XPUT \ | |
| -H "Content-type: application/json" \ | |
| -d '{ "name": "test", "password": "test" }' \ | |
| 'http://localhost:4873/-/user/org.couchdb.user:test') | |
| TOKEN=$(echo "$TOKEN_RES" | jq -r '.token') | |
| npm set //localhost:4873/:_authToken $TOKEN | |
| - name: Windows dependencies | |
| if: matrix.os == 'windows-latest' | |
| run: npm install -g @angular/cli | |
| - name: npm install | |
| run: | | |
| npm install | |
| env: | |
| CI: true | |
| - name: Publish to Verdaccio | |
| run: | | |
| nohup verdaccio --config $HOME/.config/verdaccio/config.yaml & | |
| wait-on http://localhost:4873 | |
| lerna publish prepatch --preid ci --no-push --no-git-tag-version --no-commit-hooks --force-publish "*" --yes --dist-tag ci --registry http://localhost:4873 | |
| - name: Install via @vendure/create | |
| run: | | |
| mkdir -p $HOME/install | |
| cd $HOME/install | |
| nohup verdaccio --config $HOME/.config/verdaccio/config.yaml & | |
| wait-on http://localhost:4873 | |
| npm set registry=http://localhost:4873 | |
| npm dist-tag ls @vendure/create | |
| npx @vendure/create@ci test-app --ci --use-npm --log-level info | |
| - name: Server smoke tests | |
| run: | | |
| cd $HOME/install/test-app | |
| npm run dev & | |
| node $GITHUB_WORKSPACE/.github/workflows/scripts/smoke-tests |