Closed Hinton closed 6 days ago
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 33.46%. Comparing base (
33f7643
) to head (596885a
). Report is 2 commits behind head on main.
:white_check_mark: All tests successful. No failed tests found.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
๐จ Try these New Features:
Checkmarx One โ Scan Summary & Details โ 8892f9c5-0fc7-4e36-a28f-a1591b0e31b1
Severity | Issue | Source File / Package | Checkmarx Insight |
---|---|---|---|
Unpinned Actions Full Length Commit SHA | /crowdin-pull.yml: 40 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /build-browser.yml: 436 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /build-browser.yml: 392 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... |
Severity | Issue | Source File / Package |
---|---|---|
Unpinned Actions Full Length Commit SHA | /build-browser.yml: 416 | |
Unpinned Actions Full Length Commit SHA | /crowdin-pull.yml: 47 | |
Unpinned Actions Full Length Commit SHA | /build-browser.yml: 372 |
๐๏ธ Tracking
https://bitwarden.atlassian.net/browse/PM-14485
๐ Objective
Refactor the remaining logic from gulp.
Differences compared to #11861, escaped the arguments for
apps/browser/scripts/package-safari.ps1
, since it's not done automatically by PowerShell.Part of the browser build script refactor effort. bitwarden.atlassian.net/browse/PM-6683
Webpack is now responsible for performing most of the operations previously done by gulp. This includes:
The
package.json
is modified to include browser specific commands forbuild
,build:prod
,build:watch
anddist
.Manifests
Manifests now uses the
copy-webpack-plugin
transform
feature. The logic is located inapps/browser/webpack/manifest.js
. It reads a template, which supports some basic operations primarily overriding with browser specific fields using__browser__
.The
manifest.json
for both regular and mv3 builds are identical to our existing manifests except:applications
renamed tobrowser_specific_settings
.permissions
sorted alphabetically.Safari build
Safari requires additional packaging commands. This is implemented as a powershell script due to the cross-platform nature, and since we generally require powershell in our distribution pipelines.
An alternative would be to write it in bash, but bash is less powerful and would require some additional commands like
jq
. Another alternative is to write it using js, but that would require additional dependencies.โฐ Reminders before review
๐ฆฎ Reviewer guidelines
:+1:
) or similar for great changes:memo:
) or โน๏ธ (:information_source:
) for notes or general info:question:
) for questions:thinking:
) or ๐ญ (:thought_balloon:
) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion:art:
) for suggestions / improvements:x:
) or โ ๏ธ (:warning:
) for more significant problems or concerns needing attention:seedling:
) or โป๏ธ (:recycle:
) for future improvements or indications of technical debt:pick:
) for minor or nitpick changes