EXUI-705: Automated Suppression Updates (#3220)

* EXUI-705: Configure scheduled workflow to carry out dependency check

* EXUI-705: Fix audit script after build complaint

* EXUI-705: Revert change to script for yarn audit

* EXUI-705: Action dev review comments

* EXUI-705: Add yarn install step to github action

* EXUI-705: Fixed yaml formatting issues

* EXUI-705: Remove build step that was failing

* EXUI-705: Add install step to action

* EXUI-705: Update node version

* EXUI-705: Attempt to resolve can't find script issue

* EXUI-705: Tweak script and action file

* EXUI-705: Print working dir to try and identify why script can't be found

* EXUI-705: Break out the action sctip into build and audit tasks

* EXUI-705: Go back to build only action

* EXUI-705: Add command directly to workflow file as calling script is resulting in Usage Error: Couldn't find a script named "update-audit-known-issues".

* EXUI-705: Remove yarn-audit-known-issues file to test the github action adding it again

* EXUI-705: Remove entry from yarn audit file to test it being added back in

* EXUI-705: Revert yarn audit file

* EXUI-705: Remove pull request option added for testing

* EXUI-705: Setting Preview Deployment ID

* EXUI-705: Update code to facilitate testing

* EXUI-705: Make changes for testing

* Automated update of known-issue suppression

* EXUI-705: Revert changes after testing is completed

* cve

---------

Co-authored-by: Tom Elliott <tomelliott@Toms-MacBook-Pro.local>
Co-authored-by: tomxelliott <tomxelliott@users.noreply.github.com>
Co-authored-by: RiteshHMCTS <74713687+RiteshHMCTS@users.noreply.github.com>
Co-authored-by: Ritesh Dsouza <ritesh.dsouza@HMCTS.net>

.github/workflows/dependency-check.yml

@@ -0,0 +1,33 @@
+name: Automated update of known-issue suppression
+
+on:
+  schedule:
+    # At 12 midnight, 7am and 5pm
+    - cron: "0 0,7,17 * * *"
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: tibdex/github-app-token@v1
+        id: generate-token
+        with:
+          app_id: ${{ secrets.HMCTS_GITHUB_EXUI_APP_ID }}
+          private_key: ${{ secrets.HMCTS_GITHUB_EXUI_PRIVATE_KEY }}
+      - uses: actions/checkout@v3
+        with:
+          token: ${{ steps.generate-token.outputs.token }}
+          ref: master
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 12
+          cache: 'yarn'
+      - run: yarn install --frozen-lockfile
+      - run: yarn npm audit --recursive --environment production --json > yarn-audit-known-issues
+      - name: Commit
+        uses: stefanzweifel/git-auto-commit-action@v4
+        with:
+          skip_dirty_check: false
+          commit_message: "Automated update of known-issue suppression"
+          branch: master

charts/xui-webapp/values.preview.template.yaml

@@ -23,7 +23,7 @@ nodejs:
      SERVICES_CASE_JUDICIAL_API: http://rd-judicial-api-aat.service.core-compute-aat.internal
      SERVICES_LOCATION_REF_API_URL: http://rd-location-ref-api-aat.service.core-compute-aat.internal
      FEATURE_ACCESS_MANAGEMENT_ENABLED: true
-     PREVIEW_DEPLOYMENT_ID: exui-preview-deployment-3187
+     PREVIEW_DEPLOYMENT_ID: exui-preview-deployment-3220
   keyVaults:
     rpx:
       secrets: