diff --git a/.github/workflows/mend-scan.yml b/.github/workflows/mend-scan.yml new file mode 100644 index 0000000..c26e727 --- /dev/null +++ b/.github/workflows/mend-scan.yml @@ -0,0 +1,26 @@ +name: Mend Scan + +on: + workflow_dispatch: # manual trigger + push: + branches: ["main"] + pull_request: + +jobs: + mend-scan: + runs-on: ubuntu-latest + + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Download Mend Unified Agent + run: | + curl -L https://unified-agent.s3.amazonaws.com/wss-unified-agent.jar -o wss-unified-agent.jar + + - name: Run Mend Scan + env: + WS_API_KEY: ${{ secrets.WS_API_KEY }} + run: | + java -jar wss-unified-agent.jar -c whitesource.config + diff --git a/.github/workflows/tf-apply-main.yml b/.github/workflows/tf-apply-main.yml index 1fb2d55..ce376a3 100644 --- a/.github/workflows/tf-apply-main.yml +++ b/.github/workflows/tf-apply-main.yml @@ -22,10 +22,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Install Terraform - uses: hashicorp/setup-terraform@v2 + uses: hashicorp/setup-terraform@633666f66e0061ca3b725c73b2ec20cd13a8fdd1 # v2 with: terraform_version: 1.6.6 @@ -56,7 +56,7 @@ jobs: fi - name: Setup Python - uses: actions/setup-python@v2 + uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2 with: python-version: 3 diff --git a/.github/workflows/tf-destroy-main.yml b/.github/workflows/tf-destroy-main.yml index 524c10e..a35f595 100644 --- a/.github/workflows/tf-destroy-main.yml +++ b/.github/workflows/tf-destroy-main.yml @@ -22,10 +22,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Install Terraform - uses: hashicorp/setup-terraform@v2 + uses: hashicorp/setup-terraform@633666f66e0061ca3b725c73b2ec20cd13a8fdd1 # v2 with: terraform_version: 1.6.6 @@ -46,7 +46,7 @@ jobs: fi - name: Setup Python - uses: actions/setup-python@v2 + uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2 with: python-version: 3 diff --git a/.mendio b/.mendio new file mode 100644 index 0000000..9328fd0 --- /dev/null +++ b/.mendio @@ -0,0 +1,3 @@ +{ + "settingsInheritedFrom": "Yuliya65/whitesource-config@main" +} \ No newline at end of file diff --git a/frontend/package.json b/frontend/package.json index 33a2428..215de35 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -24,16 +24,16 @@ "redux-thunk": "^2.3.0" }, "devDependencies": { - "@testing-library/react": "^10.0.2", - "@types/js-cookie": "^2.2.5", - "@types/node": "^13.7.1", - "@types/react": "^16.9.20", - "@types/react-redux": "^7.1.7", - "@zeit/next-less": "^1.0.1", - "babel-plugin-import": "^1.13.0", - "jest": "^25.2.6", - "null-loader": "^3.0.0", - "typescript": "^5.5.2", - "webpack-filter-warnings-plugin": "^1.2.1" + "@testing-library/react": "10.4.9", + "@types/js-cookie": "2.2.7", + "@types/node": "13.13.52", + "@types/react": "16.14.60", + "@types/react-redux": "7.1.33", + "@zeit/next-less": "1.0.1", + "babel-plugin-import": "1.13.8", + "jest": "25.5.4", + "null-loader": "3.0.0", + "typescript": "5.5.2", + "webpack-filter-warnings-plugin": "1.2.1" } } diff --git a/frontend/yarn.lock b/frontend/yarn.lock index 5fe4e99..f7b555d 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -1322,7 +1322,7 @@ lz-string "^1.4.4" pretty-format "^26.6.2" -"@testing-library/react@^10.0.2": +"@testing-library/react@10.4.9": version "10.4.9" resolved "https://registry.yarnpkg.com/@testing-library/react/-/react-10.4.9.tgz#9faa29c6a1a217bf8bbb96a28bd29d7a847ca150" integrity sha512-pHZKkqUy0tmiD81afs8xfiuseXfU/N7rAX3iKjeZYje86t9VaB0LrxYVa+OOsvkrveX5jCK3IjajVn2MbePvqA== @@ -1410,7 +1410,7 @@ dependencies: "@types/istanbul-lib-report" "*" -"@types/js-cookie@^2.2.5": +"@types/js-cookie@2.2.7": version "2.2.7" resolved "https://registry.yarnpkg.com/@types/js-cookie/-/js-cookie-2.2.7.tgz#226a9e31680835a6188e887f3988e60c04d3f6a3" integrity sha512-aLkWa0C0vO5b4Sr798E26QgOkss68Un0bLjs7u9qxzPT5CG+8DuNTffWES58YzJs3hrVAOs1wonycqEBqNJubA== @@ -1427,7 +1427,7 @@ dependencies: undici-types "~5.26.4" -"@types/node@^13.7.1": +"@types/node@13.13.52": version "13.13.52" resolved "https://registry.yarnpkg.com/@types/node/-/node-13.13.52.tgz#03c13be70b9031baaed79481c0c0cfb0045e53f7" integrity sha512-s3nugnZumCC//n4moGGe6tkNMyYEdaDBitVjwPxXmR5lnMG5dHePinH2EdxkG3Rh1ghFHHixAG4NJhpJW1rthQ== @@ -1447,7 +1447,7 @@ resolved "https://registry.yarnpkg.com/@types/prop-types/-/prop-types-15.7.12.tgz#12bb1e2be27293c1406acb6af1c3f3a1481d98c6" integrity sha512-5zvhXYtRNRluoE/jAp4GVsSduVUzNWKkOZrCDBWYtE7biZywwdC2AcEzg+cSMLFRfVgeAFqpfNabiPjxFddV1Q== -"@types/react-redux@^7.1.20", "@types/react-redux@^7.1.7": +"@types/react-redux@7.1.33", "@types/react-redux@^7.1.20": version "7.1.33" resolved "https://registry.yarnpkg.com/@types/react-redux/-/react-redux-7.1.33.tgz#53c5564f03f1ded90904e3c90f77e4bd4dc20b15" integrity sha512-NF8m5AjWCkert+fosDsN3hAlHzpjSiXlVy9EgQEmLoBhaNXbmyeGs/aj5dQzKuF+/q+S7JQagorGDW8pJ28Hmg== @@ -1465,7 +1465,7 @@ "@types/prop-types" "*" csstype "^3.0.2" -"@types/react@^16.9.20": +"@types/react@16.14.60": version "16.14.60" resolved "https://registry.yarnpkg.com/@types/react/-/react-16.14.60.tgz#f7ab62a329b82826f12d02bc8031d4ef4b5e0d81" integrity sha512-wIFmnczGsTcgwCBeIYOuy2mdXEiKZ5znU/jNOnMZPQyCcIxauMGWlX0TNG4lZ7NxRKj7YUIZRneJQSSdB2jKgg== @@ -1674,7 +1674,7 @@ mini-css-extract-plugin "0.4.3" postcss-loader "3.0.0" -"@zeit/next-less@^1.0.1": +"@zeit/next-less@1.0.1": version "1.0.1" resolved "https://registry.yarnpkg.com/@zeit/next-less/-/next-less-1.0.1.tgz#9a18930dc4bf04c1e9e5089365b9e40e42565a68" integrity sha512-zIyD6D1C0p+fDpVmSBzTA+vIwEDzGWWgYQ/Vp2amlC2/Mq8rtMq3BV6NxxSZ/36cFS8Tibl1K+An4150H4hOnQ== @@ -2120,7 +2120,7 @@ babel-plugin-dynamic-import-node@^2.3.0: dependencies: object.assign "^4.1.0" -babel-plugin-import@^1.13.0: +babel-plugin-import@1.13.8: version "1.13.8" resolved "https://registry.yarnpkg.com/babel-plugin-import/-/babel-plugin-import-1.13.8.tgz#782c517f6bbf2de3b1f75aaafd6d20a491c4878c" integrity sha512-36babpjra5m3gca44V6tSTomeBlPA7cHUynrE2WiQIm3rEGD9xy28MKsx5IdO45EbnpJY7Jrgd00C6Dwt/l/2Q== @@ -5150,7 +5150,7 @@ jest-worker@^25.5.0: merge-stream "^2.0.0" supports-color "^7.0.0" -jest@^25.2.6: +jest@25.5.4: version "25.5.4" resolved "https://registry.yarnpkg.com/jest/-/jest-25.5.4.tgz#f21107b6489cfe32b076ce2adcadee3587acb9db" integrity sha512-hHFJROBTqZahnO+X+PMtT6G2/ztqAZJveGqz//FnWWHurizkD05PQGzRZOhF3XP6z7SJmL+5tCfW8qV06JypwQ== @@ -6117,7 +6117,7 @@ npm-run-path@^4.0.0: dependencies: path-key "^3.0.0" -null-loader@^3.0.0: +null-loader@3.0.0: version "3.0.0" resolved "https://registry.yarnpkg.com/null-loader/-/null-loader-3.0.0.tgz#3e2b6c663c5bda8c73a54357d8fa0708dc61b245" integrity sha512-hf5sNLl8xdRho4UPBOOeoIwT3WhjYcMUQm0zj44EhD6UscMAz72o2udpoDFBgykucdEDGIcd6SXbc/G6zssbzw== @@ -8854,7 +8854,7 @@ typedarray@^0.0.6: resolved "https://registry.yarnpkg.com/typedarray/-/typedarray-0.0.6.tgz#867ac74e3864187b1d3d47d996a78ec5c8830777" integrity sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA== -typescript@^5.5.2: +typescript@5.5.2: version "5.5.2" resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.5.2.tgz#c26f023cb0054e657ce04f72583ea2d85f8d0507" integrity sha512-NcRtPEOsPFFWjobJEtfihkLCZCXZt/os3zf8nTxjVH3RvTSxjrCamJpbExGvYOF+tFHc3pA65qpdwPbzjohhew== @@ -9136,7 +9136,7 @@ webpack-dev-middleware@3.7.0: range-parser "^1.2.1" webpack-log "^2.0.0" -webpack-filter-warnings-plugin@^1.2.1: +webpack-filter-warnings-plugin@1.2.1: version "1.2.1" resolved "https://registry.yarnpkg.com/webpack-filter-warnings-plugin/-/webpack-filter-warnings-plugin-1.2.1.tgz#dc61521cf4f9b4a336fbc89108a75ae1da951cdb" integrity sha512-Ez6ytc9IseDMLPo0qCuNNYzgtUl8NovOqjIq4uAU8LTD4uoa1w1KpZyyzFtLTEMZpkkOkLfL9eN+KGYdk1Qtwg==