Skip to content

chore(carbon-accounting): fix CVE-2022-25881 CVE-2021-39167 #2055

chore(carbon-accounting): fix CVE-2022-25881 CVE-2021-39167

chore(carbon-accounting): fix CVE-2022-25881 CVE-2021-39167 #2055

# Copyright IBM Corp. All Rights Reserved.
#
# SPDX-License-Identifier: CC-BY-4.0
# This workflow will do a clean install of node dependencies, cache/restore them, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
name: Unit Test Weaver Node Packages
env:
NODEJS_LTS_VERSION: v18.18.2
NODEJS_NEXT_LTS_VERSION: v20.9.0
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
jobs:
check_code_changed:
outputs:
fabric_sdk_changed: ${{ steps.changes.outputs.fabric_sdk_changed }}
iin_agent_changed: ${{ steps.changes.outputs.iin_agent_changed }}
docs_changed: ${{ steps.changes.outputs.docs_changed }}
runs-on: ubuntu-22.04
steps:
- uses: actions/[email protected]
- uses: dorny/[email protected]
id: changes
with:
filters: |
fabric_sdk_changed:
- '.github/workflows/test_weaver-node-pkgs.yaml'
- 'weaver/common/protos/**'
- 'weaver/common/protos-js/**'
- 'weaver/sdks/fabric/interoperation-node-sdk/**'
iin_agent_changed:
- '.github/workflows/test_weaver-node-pkgs.yaml'
- 'weaver/common/protos/**'
- 'weaver/common/protos-js/**'
- 'weaver/sdks/fabric/interoperation-node-sdk/**'
- 'weaver/core/identity-management/**'
docs_changed:
- '.github/workflows/test_weaver-node-pkgs.yaml'
- 'weaver/docs/**'
unit_test_weaver_node_sdk_local:
needs: check_code_changed
runs-on: ubuntu-22.04
strategy:
matrix:
node-version: [v18.18.2, v20.9.0]
exclude:
- node-version: ${{ needs.check_code_changed.outputs.fabric_sdk_changed != 'true' }}
# See supported Node.js release schedule at https://nodejs.org/en/about/releases/
steps:
- uses: actions/[email protected]
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/[email protected]
with:
node-version: ${{ matrix.node-version }}
- name: Use Protoc 3.15
run: |
curl -LO https://github.com/protocolbuffers/protobuf/releases/download/v3.15.6/protoc-3.15.6-linux-x86_64.zip
unzip protoc-3.15.6-linux-x86_64.zip -d protoc
- name: Build JS Protos
run: |
export PATH="$PATH:${GITHUB_WORKSPACE}/protoc/bin"
make build
working-directory: weaver/common/protos-js
- name: Build
run: make build-local
working-directory: weaver/sdks/fabric/interoperation-node-sdk
- name: Tests
run: npm run test
working-directory: weaver/sdks/fabric/interoperation-node-sdk
unit_test_iin_agent_local:
needs: check_code_changed
runs-on: ubuntu-22.04
strategy:
matrix:
node-version: [v18.18.2, v20.9.0]
exclude:
- node-version: ${{ needs.check_code_changed.outputs.iin_agent_changed != 'true' }}
# See supported Node.js release schedule at https://nodejs.org/en/about/releases/
steps:
- uses: actions/[email protected]
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/[email protected]
with:
node-version: ${{ matrix.node-version }}
- name: Use Protoc 3.15
run: |
curl -LO https://github.com/protocolbuffers/protobuf/releases/download/v3.15.6/protoc-3.15.6-linux-x86_64.zip
unzip protoc-3.15.6-linux-x86_64.zip -d protoc
- name: Build JS Protos
run: |
export PATH="$PATH:${GITHUB_WORKSPACE}/protoc/bin"
make build
working-directory: weaver/common/protos-js
- name: Build
run: make build-local
working-directory: weaver/sdks/fabric/interoperation-node-sdk
- name: Build IIN Agent
run: make build-local
working-directory: weaver/core/identity-management/iin-agent
- name: Tests
run: npm run test
working-directory: weaver/core/identity-management/iin-agent
build_docs:
needs: check_code_changed
if: needs.check_code_changed.outputs.docs_changed == 'true'
runs-on: ubuntu-22.04
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/[email protected]
- name: Use Node.js ${{ env.NODEJS_LTS_VERSION }}
uses: actions/[email protected]
with:
node-version: ${{ env.NODEJS_LTS_VERSION }}
- name: NPM INSTALL
run: npm install
working-directory: weaver/docs
- name: Build
run: npm run build
working-directory: weaver/docs