fix for CVE-2024-41110 #1256
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Athena CI | |
| on: | |
| pull_request: | |
| branches: [ main ] | |
| defaults: | |
| run: | |
| working-directory: ./packages/athena | |
| shell: bash | |
| env: | |
| DB_CONNECTION_STRING: http://admin:password@127.0.0.1:5984/ | |
| jobs: | |
| test-suite: | |
| name: Test suite | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 18.x | |
| - name: Setup CouchDB | |
| uses: iamssen/couchdb-github-action@master | |
| with: | |
| couchdb-version: '3.3' | |
| - run: curl ${{ env.DB_CONNECTION_STRING }} | |
| - run: npm config set registry https://registry.npmjs.org/ | |
| - run: npm ci | |
| - name: Install stitch dependencies | |
| run: cd ../stitch && npm ci && cd - | |
| - run: npm run test | |
| start-athena: | |
| name: Start Athena | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 18.x | |
| - name: Setup CouchDB | |
| uses: iamssen/couchdb-github-action@master | |
| with: | |
| couchdb-version: '3.3' | |
| - run: curl ${{ env.DB_CONNECTION_STRING }} | |
| - run: npm config set registry https://registry.npmjs.org/ | |
| - run: npm ci | |
| - run: ../../common/deploy_scripts/test_run_athena.sh | |
| audit: | |
| name: NPM Audit | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v1 | |
| with: | |
| node-version: 18.x | |
| - run: npm i -g better-npm-audit && npm run audit | |
| openapi: | |
| name: Validate OpenAPI | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 18.x | |
| - run: npm config set registry https://registry.npmjs.org/ | |
| - run: npm install js-yaml | |
| - run: npm install -g swagger-cli | |
| - run: npm install -g ibm-openapi-validator@0.56.0 | |
| - run: npm run validate:openapi:self | |
| - run: npm run validate:openapi:cloud | |
| - run: npm run validate:openapi | |
| lint: | |
| name: Lint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 18.x | |
| - run: npm ci | |
| - run: npm run lint |