Enhance package validation + Remove Symbolic Links (#267)

.github/workflows/build.yml

@@ -125,7 +125,6 @@ jobs:
             GITHUB_ACCESS_TOKEN: ${{ secrets.GH_RELEASE_PAT }}
          run: make build
 
-
    job_artifacts:
      name: Upload Artifacts
      needs: [job_build, job_carthage_build]
@@ -160,3 +159,34 @@ jobs:
            name: ${{ github.sha }}
            path: |
              ${{ github.workspace }}/sentry-cordova-*
+
+   job_check_symlink:
+     name: Check for Symbolic Links
+     needs: [job_artifacts]
+     runs-on: macos-latest
+     defaults:
+      run:
+        shell: pwsh
+     steps:
+      - name: Checkout
+        uses: actions/[email protected]
+
+      - name: Download test app artifact
+        uses: actions/download-artifact@v2
+        with:
+           name: ${{ github.sha }}
+           path: |
+             ${{ github.workspace }}/artifact
+      - name: Extract artifact
+        run: |
+          cd ${{ github.workspace }}/artifact
+          $bundleName = (Get-Item *.tgz).Name
+          tar -xvzf "$bundleName"
+
+      - name: Check if package contains any Symlink
+        run: |
+          $symLinks = (find "${{ github.workspace }}" -type l -ls)
+          if ($null -ne $symLinks) {
+            Write-Error "Atfifact contains illegal SymLinks`n$symLinks"
+          }
+          Write-Output "No Symbolic Links found, all good :)"

.npmignore

@@ -1,6 +1,6 @@
 *
 !/dist/**/*
-!/src/ios/Carthage/Build/Sentry.xcframework/**/*
+!/src/ios/Carthage/Build/Sentry.xcframework/ios-*/**/*
 !/src/ios/SentryCordova.*
 !/src/android/**/*
 !/scripts/**/*

CHANGELOG.md

@@ -4,6 +4,7 @@
 
 ### Fixes
 
+- Enhance package validation and Removed Symbolic Links ([#267](https://github.com/getsentry/sentry-cordova/pull/267))
 - Sentry.xcframework being excluded by npm rule ([#266](https://github.com/getsentry/sentry-cordova/pull/266))
 
 ## 1.0.1