diff --git a/.github/workflows/frogbot-scan-pr.yml b/.github/workflows/frogbot-scan-pr.yml new file mode 100644 index 000000000..fa8f41ddb --- /dev/null +++ b/.github/workflows/frogbot-scan-pr.yml @@ -0,0 +1,74 @@ +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. +# Frogbot Scan Pull Request does the following: +# Automatically scans new pull requests for security vulnerabilities. +# Uses JFrog Xray to scan the project. +# Read more about Frogbot here - https://github.com/jfrog/frogbot#frogbot + +# Some projects require creating a frogbot-config.yml file. Read more about it here - https://github.com/jfrog/frogbot/blob/master/docs/frogbot-config.md + +name: "Frogbot Scan Pull Request" +on: + pull_request_target: + types: [ opened, synchronize ] +permissions: + pull-requests: write + contents: read +jobs: + scan-pull-request: + runs-on: ubuntu-latest + # A pull request needs to be approved, before Frogbot scans it. Any GitHub user who is associated with the + # "frogbot" GitHub environment can approve the pull request to be scanned. + # Read more here (Install Frogbot Using GitHub Actions): https://github.com/jfrog/frogbot/blob/master/docs/install-github.md + environment: frogbot + steps: + - uses: actions/checkout@v2 + with: + ref: ${{ github.event.pull_request.head.sha }} + + # IMPORTANT: + # 1. See the following link for information about the tools that need to be installed for Frogbot to work - https://github.com/jfrog/frogbot/tree/master/docs/templates/github-actions/scan-and-fix + # 2. Some projects require creating a frogbot-config.yml file. Read more about it here - https://github.com/jfrog/frogbot/blob/master/docs/frogbot-config.md + + - uses: jfrog/frogbot@3395426f351556d4568e30a6dfd2909dbedae99e + env: + # [Mandatory if the two conditions below are met] + # 1. The project uses npm, yarn 2, NuGet or .NET to download its dependencies + # 2. The `installCommand` variable isn't set in your frogbot-config.yml file. + # + # The command that installs the project dependencies (e.g "npm i", "nuget restore" or "dotnet restore") + # JF_INSTALL_DEPS_CMD: "" + + # [Mandatory] + # JFrog platform URL + JF_URL: ${{ secrets.JF_URL }} + + # [Mandatory if JF_USER and JF_PASSWORD are not provided] + # JFrog access token with 'read' permissions on Xray service + JF_ACCESS_TOKEN: ${{ secrets.JF_ACCESS_TOKEN }} + + # [Mandatory if JF_ACCESS_TOKEN is not provided] + # JFrog username with 'read' permissions for Xray. Must be provided with JF_PASSWORD + # JF_USER: ${{ secrets.JF_USER }} + + # [Mandatory if JF_ACCESS_TOKEN is not provided] + # JFrog password. Must be provided with JF_USER + # JF_PASSWORD: ${{ secrets.JF_PASSWORD }} + + # [Mandatory] + # The GitHub token automatically generated for the job + JF_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }} + + # [Optional] + # If the machine that runs Frogbot has no access to the internat, set the name of a remote repository + # in Artifactory, which proxies https://releases.jfrog.io/artifactory + # The 'frogbot' executable and other tools it needs will be downloaded through this repository. + # JF_RELEASES_REPO: "" + + # [Optional] + # Frogbot will download the project dependencies, if they're not cached locally. To download the + # dependencies from a virtual repository in Artifactory, set the name of of the repository. There's no + # need to set this value, if it is set in the frogbot-config.yml file. + # JF_DEPS_REPO: "" diff --git a/azure-pipelines-1.yml b/azure-pipelines-1.yml new file mode 100644 index 000000000..af8f2b680 --- /dev/null +++ b/azure-pipelines-1.yml @@ -0,0 +1,25 @@ +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: ubuntu-latest + +steps: +- script: echo Hello, world! + displayName: 'Run a one-line script' + +- script: | + echo Add other tasks to build, test, and deploy your project. + echo See https://aka.ms/yaml + displayName: 'Run a multi-line script' +- task: ArtifactoryNuGet@2 + inputs: + command: 'restore' + artifactoryService: 'Kayal_Art' + targetResolveRepo: 'nuget' + solutionPath: '**/*.sln' diff --git a/azure-pipelines-2.yml b/azure-pipelines-2.yml new file mode 100644 index 000000000..803d32959 --- /dev/null +++ b/azure-pipelines-2.yml @@ -0,0 +1,36 @@ +# Universal Windows Platform +# Build a Universal Windows Platform project using Visual Studio. +# Add steps that test and distribute an app, save build artifacts, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: 'windows-latest' + +variables: + solution: '**/*.sln' + buildPlatform: 'x86|x64|ARM' + buildConfiguration: 'Release' + appxPackageDir: '$(build.artifactStagingDirectory)\AppxPackages\\' + +steps: +- task: NuGetToolInstaller@1 + +- task: NuGetCommand@2 + inputs: + restoreSolution: '$(solution)' + +- task: VSBuild@1 + inputs: + platform: 'x86' + solution: '$(solution)' + configuration: '$(buildConfiguration)' + msbuildArgs: '/p:AppxBundlePlatforms="$(buildPlatform)" /p:AppxPackageDir="$(appxPackageDir)" /p:AppxBundle=Always /p:UapAppxPackageBuildMode=StoreUpload' +- task: ArtifactoryNuGet@1 + inputs: + command: 'restore' + artifactoryService: 'Kayal_Art' + targetResolveRepo: 'nuget' + solutionPath: '**/*.sln' diff --git a/azure-pipelines-3.yml b/azure-pipelines-3.yml new file mode 100644 index 000000000..803d32959 --- /dev/null +++ b/azure-pipelines-3.yml @@ -0,0 +1,36 @@ +# Universal Windows Platform +# Build a Universal Windows Platform project using Visual Studio. +# Add steps that test and distribute an app, save build artifacts, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: 'windows-latest' + +variables: + solution: '**/*.sln' + buildPlatform: 'x86|x64|ARM' + buildConfiguration: 'Release' + appxPackageDir: '$(build.artifactStagingDirectory)\AppxPackages\\' + +steps: +- task: NuGetToolInstaller@1 + +- task: NuGetCommand@2 + inputs: + restoreSolution: '$(solution)' + +- task: VSBuild@1 + inputs: + platform: 'x86' + solution: '$(solution)' + configuration: '$(buildConfiguration)' + msbuildArgs: '/p:AppxBundlePlatforms="$(buildPlatform)" /p:AppxPackageDir="$(appxPackageDir)" /p:AppxBundle=Always /p:UapAppxPackageBuildMode=StoreUpload' +- task: ArtifactoryNuGet@1 + inputs: + command: 'restore' + artifactoryService: 'Kayal_Art' + targetResolveRepo: 'nuget' + solutionPath: '**/*.sln' diff --git a/azure-pipelines-4.yml b/azure-pipelines-4.yml new file mode 100644 index 000000000..db149342f --- /dev/null +++ b/azure-pipelines-4.yml @@ -0,0 +1,39 @@ +trigger: +- master + +pool: + vmImage: 'windows-latest' + +variables: + solution: '**/*.sln' + buildPlatform: 'x86|x64|ARM' + buildConfiguration: 'Release' + appxPackageDir: '$(build.artifactStagingDirectory)\AppxPackages\\' + +steps: +- task: NuGetToolInstaller@1 + +- task: NuGetCommand@2 + inputs: + restoreSolution: '$(solution)' + +- task: VSBuild@1 + inputs: + platform: 'x86' + solution: '$(solution)' + configuration: '$(buildConfiguration)' + msbuildArgs: '/p:AppxBundlePlatforms="$(buildPlatform)" /p:AppxPackageDir="$(appxPackageDir)" /p:AppxBundle=Always /p:UapAppxPackageBuildMode=StoreUpload' + +- task: ArtifactoryToolsInstaller@1 + inputs: + artifactoryService: 'Kayal_Art' + cliInstallationRepo: 'jfrog-cli' + installCustomVersion: true + cliVersion: '1.46.3' + +- task: ArtifactoryNuGet@1 + inputs: + command: 'restore' + artifactoryService: 'Kayal_Art' + targetResolveRepo: 'nuget' + solutionPath: '**/*.sln' diff --git a/azure-pipelines-5.yml b/azure-pipelines-5.yml new file mode 100644 index 000000000..abad88461 --- /dev/null +++ b/azure-pipelines-5.yml @@ -0,0 +1,32 @@ +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: ubuntu-latest + +steps: +- script: echo Hello, world! + displayName: 'Run a one-line script' + +- script: | + echo Add other tasks to build, test, and deploy your project. + echo See https://aka.ms/yaml + displayName: 'Run a multi-line script' +- task: ArtifactoryToolsInstaller@1 + inputs: + artifactoryService: 'Kayal_Art' + cliInstallationRepo: 'jfrog-cli' + installCustomVersion: true + cliVersion: '1.46.3' +- task: ArtifactoryNuGet@1 + inputs: + command: 'restore' + artifactoryService: 'Kayal_Art' + targetResolveRepo: 'nuget' + solutionPath: '**/*.sln' + noNuGetCache: true \ No newline at end of file diff --git a/azure-pipelines-6.yml b/azure-pipelines-6.yml new file mode 100644 index 000000000..62e6d67fa --- /dev/null +++ b/azure-pipelines-6.yml @@ -0,0 +1,62 @@ +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: ubuntu-latest + +steps: +- script: echo Hello, world! + displayName: 'Run a one-line script' + +- script: | + echo Add other tasks to build, test, and deploy your project. + echo See https://aka.ms/yaml + displayName: 'Run a multi-line script' +- task: ArtifactoryNpm@2 + inputs: + command: 'pack and publish' + artifactoryService: 'jy_dev' + sourceRepo: 'prjt-npm-remote' + targetRepo: 'prjt-test-dev' + workingFolder: 'npm-example' + projectKey: 'prjt' + collectBuildInfo: true + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' +- task: ArtifactoryPublishBuildInfo@1 + inputs: + artifactoryService: 'jy_dev' + projectKey: 'prjt' + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' +- task: ArtifactoryBuildPromotion@1 + inputs: + artifactoryService: 'jy_dev' + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' + projectKey: 'prjt' + targetRepo: 'prjt-test-stg' + status: 'Released' + sourceRepo: 'prjt-test-dev' + includeDependencies: true + copy: false + dryRun: false + + +- task: ArtifactoryBuildPromotion@1 + inputs: + artifactoryService: 'jy_prd' + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' + projectKey: 'prjt' + targetRepo: 'prjt-test-prd' + status: 'Released' + sourceRepo: 'prjt-test-stg' + includeDependencies: true + copy: false + dryRun: false \ No newline at end of file diff --git a/azure-pipelines-7.yml b/azure-pipelines-7.yml new file mode 100644 index 000000000..6328966bf --- /dev/null +++ b/azure-pipelines-7.yml @@ -0,0 +1,21 @@ +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: ubuntu-latest + +steps: +- script: echo Hello, world! + displayName: 'Run a one-line script' + +- task: ArtifactoryNpm@2 + inputs: + command: 'pack and publish' + artifactoryService: 'sandy' + targetRepo: 'san-npm' + workingFolder: 'npm-example/' diff --git a/azure-pipelines-8.yml b/azure-pipelines-8.yml new file mode 100644 index 000000000..ef0599f76 --- /dev/null +++ b/azure-pipelines-8.yml @@ -0,0 +1,44 @@ +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: ubuntu-latest + +steps: +- script: echo Hello, world! + displayName: 'Run a one-line script' + +- script: | + echo Add other tasks to build, test, and deploy your project. + echo See https://aka.ms/yaml + displayName: 'Run a multi-line script' + +- task: ArtifactoryNpm@2 + inputs: + command: 'install' + artifactoryService: 'sandy' + sourceRepo: 'san-npm' + workingFolder: 'npm-example/' + collectBuildInfo: true + threads: '1' + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' + arguments: '--prefer-offline --audit=false --no-audit --prefix $(System.DefaultWorkingDirectory' + +- task: ArtifactoryPublishBuildInfo@1 + inputs: + artifactoryService: 'sandy' + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' +- task: JFrogBuildScan@1 + inputs: + xrayConnection: 'sandeepxray' + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' + allowFailBuild: true + vuln: false diff --git a/azure-pipelines.yml b/azure-pipelines.yml new file mode 100644 index 000000000..edac66fd6 --- /dev/null +++ b/azure-pipelines.yml @@ -0,0 +1,57 @@ +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: ubuntu-latest + +steps: +- script: echo Hello, world! + displayName: 'Run a one-line script' + +- script: | + echo Add other tasks to build, test, and deploy your project. + echo See https://aka.ms/yaml + displayName: 'Run a multi-line script' +- task: ArtifactoryNuGet@2 + inputs: + command: 'restore' + artifactoryService: 'jy-service' + targetResolveRepo: 'test-nuget' + solutionPath: '**/*.sln' + collectBuildInfo: true + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' +- task: ArtifactoryDotnetCore@1 + inputs: + command: 'push' + artifactoryService: 'jy-service' + targetDeployRepo: 'test-nuget' + pathToNupkg: '*.nupkg' + collectBuildInfo: true + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' +- task: ArtifactoryNuGet@2 + inputs: + command: 'push' + artifactoryService: 'jy-service' + targetDeployRepo: 'test-nuget' + pathToNupkg: '*.nupkg' + collectBuildInfo: true + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' +- task: ArtifactoryPublishBuildInfo@1 + inputs: + artifactoryService: 'jy-service' + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' +- task: ArtifactoryXrayScan@1 + inputs: + artifactoryService: 'jy-service' + buildName: '$(Build.DefinitionName)' + buildNumber: '$(Build.BuildNumber)' + allowFailBuild: true diff --git a/golang-example/hello/go.mod b/golang-example/hello/go.mod index 3200210a4..f0bb1268a 100644 --- a/golang-example/hello/go.mod +++ b/golang-example/hello/go.mod @@ -1,3 +1,30 @@ module github.com/you/hello -require rsc.io/quote v1.5.2 +go 1.19 + +require ( + cloud.google.com/go v0.45.1 // indirect + github.com/aws/aws-sdk-go v1.15.78 // indirect + github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect - test yes + github.com/golang/protobuf v1.3.2 // indirect + github.com/googleapis/gax-go/v2 v2.0.5 // indirect + github.com/hashicorp/go-cleanhttp v0.5.2 // indirect + github.com/hashicorp/go-getter v1.5.3 // indirect + github.com/hashicorp/go-safetemp v1.0.0 // indirect + github.com/hashicorp/go-version v1.1.0 // indirect + github.com/hashicorp/golang-lru v0.5.1 // indirect + github.com/jmespath/go-jmespath v0.0.0-20160202185014-0b12d6b521d8 // indirect + github.com/klauspost/compress v1.11.2 // indirect + github.com/mitchellh/go-homedir v1.0.0 // indirect + github.com/mitchellh/go-testing-interface v1.0.0 // indirect + github.com/ulikunitz/xz v0.5.8 // indirect + go.opencensus.io v0.22.0 // indirect + golang.org/x/net v0.0.0-20190620200207-3b0461eec859 // indirect + golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45 // indirect + golang.org/x/sys v0.0.0-20190624142023-c5567b49c5d0 // indirect + golang.org/x/text v0.3.2 // indirect + google.golang.org/api v0.9.0 // indirect + google.golang.org/appengine v1.6.1 // indirect + google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55 // indirect + google.golang.org/grpc v1.21.1 // indirect +) diff --git a/jenkins-examples/pipeline-examples/resources/props-upload.json b/jenkins-examples/pipeline-examples/resources/props-upload.json index 8d41cfe80..31f4fb1d2 100755 --- a/jenkins-examples/pipeline-examples/resources/props-upload.json +++ b/jenkins-examples/pipeline-examples/resources/props-upload.json @@ -2,12 +2,12 @@ "files": [ { "pattern": "jenkins-examples/pipeline-examples/resources/ArtifactoryPipeline.zip", - "target": "libs-snapshot-local", + "target": "prjt-maven-local", "props": "p1=v1;p2=v2" }, { "pattern": "jenkins-examples/pipeline-examples/resources/ArtifactoryPipelineNoProps.zip", - "target": "libs-snapshot-local" + "target": "prjt-maven-local" } ] } diff --git a/npm-example/package.json b/npm-example/package.json index fb3158a09..1610139bb 100644 --- a/npm-example/package.json +++ b/npm-example/package.json @@ -1,13 +1,21 @@ { - "name": "npm-example", - "version": "0.0.3", - "scripts": { - "start": "node helloworld" + "name": "monocle-ngx", + "version": "0.0.1-alpha.4", + "publishConfig": { + "registry": "https://sandeepmkp.jfrog.io/artifactory/api/npm/san-npm/" + }, + "peerDependencies": { + "@angular/common": "^12.2.0", + "@angular/core": "^12.2.0" }, "dependencies": { - "send": "^0.16.2" + "tslib": "^2.3.0" }, - "devDependencies": { - "debug": "^4.1.1" - } + "main": "bundles/monocle-ngx.umd.js", + "module": "fesm2015/monocle-ngx.js", + "es2015": "fesm2015/monocle-ngx.js", + "esm2015": "esm2015/monocle-ngx.js", + "fesm2015": "fesm2015/monocle-ngx.js", + "typings": "monocle-ngx.d.ts", + "sideEffects": false }