Skip to content

build: added SFW in the build pipeline #7738

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
pradeepjangid195 wants to merge 1 commit into
base: master
Choose a base branch
from
+41 −12
Draft

build: added SFW in the build pipeline #7738

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 31 additions & 7 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,10 @@ jobs:
node-version: [20.x, 22.x]

steps:
- uses: socketdev/action@v1
with:
mode: firewall-free

- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
ref: ${{ github.event.pull_request.head.sha }}
Expand Down Expand Up @@ -58,7 +62,7 @@ jobs:

- name: Install Packages
if: steps.lerna-cache.outputs.cache-hit != 'true' || contains( github.event.pull_request.labels.*.name, 'SKIP_CACHE')
run: yarn install --with-frozen-lockfile --ignore-scripts
run: sfw yarn install --with-frozen-lockfile --ignore-scripts

- name: Check In-Repo Package Versions
run: yarn run check-versions
Expand Down Expand Up @@ -90,6 +94,10 @@ jobs:
check: ['lint', 'format', 'commit-lint', 'dependencies', 'audit']

steps:
- uses: socketdev/action@v1
with:
mode: firewall-free

- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
ref: ${{ github.event.pull_request.head.sha }}
Expand All @@ -110,7 +118,7 @@ jobs:

- name: Install Packages
if: steps.lerna-cache.outputs.cache-hit != 'true' || contains( github.event.pull_request.labels.*.name, 'SKIP_CACHE')
run: yarn install --with-frozen-lockfile --ignore-scripts
run: sfw yarn install --with-frozen-lockfile --ignore-scripts

- name: Lint Source Code
if: matrix.check == 'lint'
Expand Down Expand Up @@ -138,6 +146,10 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: socketdev/action@v1
with:
mode: firewall-free

- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Setup node 22
Expand All @@ -156,7 +168,7 @@ jobs:

- name: Install Packages
if: steps.lerna-cache.outputs.cache-hit != 'true'
run: yarn install --with-frozen-lockfile --ignore-scripts
run: sfw yarn install --with-frozen-lockfile --ignore-scripts

- name: build packages
env:
Expand All @@ -175,6 +187,10 @@ jobs:
runs-on: ubuntu-22.04

steps:
- uses: socketdev/action@v1
with:
mode: firewall-free

- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
ref: ${{ github.event.pull_request.head.sha }}
Expand Down Expand Up @@ -249,7 +265,7 @@ jobs:

- name: Install Packages
if: steps.lerna-cache.outputs.cache-hit != 'true' || contains( github.event.pull_request.labels.*.name, 'SKIP_CACHE')
run: yarn install --with-frozen-lockfile
run: sfw yarn install --with-frozen-lockfile

- name: build packages
if: steps.lerna-cache.outputs.cache-hit == 'true'
Expand Down Expand Up @@ -338,6 +354,10 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: socketdev/action@v1
with:
mode: firewall-free

- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
ref: ${{ github.event.pull_request.head.sha }}
Expand All @@ -358,7 +378,7 @@ jobs:

- name: Install Packages
if: steps.lerna-cache.outputs.cache-hit != 'true' || contains( github.event.pull_request.labels.*.name, 'SKIP_CACHE')
run: yarn install --with-frozen-lockfile --ignore-scripts
run: sfw yarn install --with-frozen-lockfile --ignore-scripts

- name: Check Dockerfile is up to date
run: |
Expand All @@ -373,6 +393,10 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: socketdev/action@v1
with:
mode: firewall-free

- name: Checkout PR
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
Expand All @@ -394,15 +418,15 @@ jobs:

- name: Install Packages
if: steps.lerna-cache.outputs.cache-hit != 'true'
run: yarn install --with-frozen-lockfile --ignore-scripts
run: sfw yarn install --with-frozen-lockfile --ignore-scripts

- name: Build packages
env:
DISABLE_V8_COMPILE_CACHE: '1'
run: yarn run postinstall

- name: Install OpenAPI Generator at root
run: yarn add -W @api-ts/openapi-generator@v5
run: sfw yarn add -W @api-ts/openapi-generator@v5

- name: Download and install vacuum v0.18.1
run: |
Expand Down
8 changes: 6 additions & 2 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,10 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: socketdev/action@v1
with:
mode: firewall-free

- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

Expand All @@ -26,7 +30,7 @@ jobs:
node-version-file: .nvmrc

- name: Install BitGoJS
run: yarn install --with-frozen-lockfile
run: sfw yarn install --with-frozen-lockfile

- name: Set Environment Variable for Alpha
if: github.ref != 'refs/heads/master' # only publish changes if on feature branches
Expand Down Expand Up @@ -56,7 +60,7 @@ jobs:
npx tsx ./scripts/prepare-release.ts ${{ env.preid }}

- name: Rebuild packages
run: yarn
run: sfw yarn

- name: Commit Local Changes
run: git commit -am "Auto updated ${{ env.preid }} branch" --no-verify || echo "No changes to commit"
Expand Down
7 changes: 4 additions & 3 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,19 +14,20 @@ RUN find modules \! -name "package.json" -mindepth 2 -maxdepth 2 -print | xargs

FROM node:22.16.0-bookworm-slim@sha256:2f3571619daafc6b53232ebf2fcc0817c1e64795e92de317c1684a915d13f1a5 AS builder
RUN apt-get update && apt-get install -y git python3 make g++ libtool autoconf automake
RUN npm install -g @socketregistry/sfw
WORKDIR /tmp/bitgo
COPY --from=filter-packages-json /tmp/bitgo .
# (skip postinstall) https://github.com/yarnpkg/yarn/issues/4100#issuecomment-388944260
RUN NOYARNPOSTINSTALL=1 yarn install --pure-lockfile --network-timeout 120000
RUN NOYARNPOSTINSTALL=1 sfw yarn install --pure-lockfile --network-timeout 120000

COPY . .
RUN \
# clean up unnecessary local node_modules and dist
rm -rf modules/**/node_modules modules/**/dist && \
# install with dev deps so we can run the prepare script
yarn install --frozen-lockfile && \
sfw yarn install --frozen-lockfile && \
# install again to prune dev deps
yarn install --production --frozen-lockfile --non-interactive --ignore-scripts && \
sfw yarn install --production --frozen-lockfile --non-interactive --ignore-scripts && \
# remove any src code leftover (we only want dist)
rm -r modules/*/src

Expand Down
Loading