diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index d465e38ba..97495a46b 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -37,21 +37,11 @@ check: apt-get install build-essential libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev -y fi script: - - start_section "Install Dependencies" - # temporarily replace FontAwesomePro dependency with its fake version as the CI can’t access it - # the name needs to be changed in both package.json and pnpm-lock.yaml - - 'sed -i "s/git+ssh:\/\/git@gitlab.com:Avris\/FontAwesomePro.git/git+https:\/\/gitlab.com\/Avris\/FakeFontAwesomePro.git/" package.json pnpm-lock.yaml' - # the referenced SHA needs to be additionally changed in pnpm-lock.yaml - - 'sed -i "s/git@gitlab.com+Avris\/FontAwesomePro\/f00db606f659dca78b143b7bcab5671b2cb459a8/gitlab.com\/Avris\/FakeFontAwesomePro\/0d322c775cbe9bf99da261700be30251291b51a8/" pnpm-lock.yaml' - - 'sed -i "s/resolution: {commit: f00db606f659dca78b143b7bcab5671b2cb459a8, repo: git@gitlab.com:Avris\/FontAwesomePro.git, type: git}/resolution: { tarball: https:\/\/gitlab.com\/api\/v4\/projects\/Avris%2FFakeFontAwesomePro\/repository\/archive.tar.gz?sha=0d322c775cbe9bf99da261700be30251291b51a8 }/" pnpm-lock.yaml' + - start_section "Install Dependencies & Setup Environment" + - echo "https://gitlab-ci-token:${CI_JOB_TOKEN}@gitlab.com" > ~/.git-credentials + - git config --global credential.helper store - corepack enable pnpm - - pnpm install || record_failure - - end_section - - - start_section "Setup environment" - make install || record_failure - # revert the changes for the FontAwesomePro dependency only now because `make install` calls `pnpm install` - - git restore package.json pnpm-lock.yaml - end_section - start_section "Type checking" @@ -59,8 +49,7 @@ check: - end_section - start_section "Unit Tests" - - > - pnpm vitest --reporter=default --reporter=junit --outputFile=junit.xml --coverage || record_failure + - pnpm vitest --reporter=default --reporter=junit --outputFile=junit.xml --coverage || record_failure - end_section - start_section "Check linting rules" @@ -214,7 +203,15 @@ deploy test/purple: ENVIRONMENT_INSTANCE: 'purple' ENVIRONMENT_DOMAIN: 'test-purple.pronouns.page' -# include: -# - template: Security/Dependency-Scanning.gitlab-ci.yml -# -# Pending resolution of: https://gitlab.com/PronounsPage/PronounsPage/-/merge_requests/453#note_1911466136 +include: + - template: Jobs/Secret-Detection.gitlab-ci.yml + # - template: Jobs/Container-Scanning.gitlab-ci.yml --- TODO: Configure Images + - template: Jobs/Dependency-Scanning.gitlab-ci.yml + - template: Jobs/SAST.gitlab-ci.yml + - template: Jobs/SAST-IaC.gitlab-ci.yml + +variables: + AST_ENABLE_MR_PIPELINES: true + DS_EXCLUDED_ANALYZERS: gemnasium-python + DS_MAX_DEPTH: 4 + CS_QUIET: true diff --git a/README.md b/README.md index ccde2b433..680dcf670 100644 --- a/README.md +++ b/README.md @@ -15,7 +15,7 @@ We're using FontAwesome Pro, so to set up a local copy without having a FA licen open `package.json` and replace ``` -"@fortawesome/fontawesome-pro": "git+ssh://git@gitlab.com:Avris/FontAwesomePro.git", +"@fortawesome/fontawesome-pro": "https://gitlab.com/Avris/FontAwesomePro", ``` with @@ -26,7 +26,7 @@ with or, for Git via HTTPS: ``` -"@fortawesome/fontawesome-pro": "git+https://git@gitlab.com/Avris/FakeFontAwesomePro.git", +"@fortawesome/fontawesome-pro": "https://gitlab.com/Avris/FakeFontAwesomePro", ``` Do not commit that change! diff --git a/locale/fo/translations.suml b/locale/fo/translations.suml index cc3ffc43c..4824e1e93 100644 --- a/locale/fo/translations.suml +++ b/locale/fo/translations.suml @@ -1036,7 +1036,7 @@ profile: duplicateDescription: 'Lýsingin má vera øðrvísi enn arðar' invalidOpinion: 'Valdað ímyndin var ikki at finna í frágreiðingini omanfyri' kys: 'Okkara tænastutreytir banna at eggja til sjálvskaða og/ella sjálvmorð. ' - custom: 'Sergjørd, lagt afturat av:' + custom: 'Sergjørd, lagt afturat av brúkarinum:' expendableList: more: '… og %count% fleiri lutir' show: '(trýst fyri at vísa)' @@ -1494,7 +1494,7 @@ mode: automatic: 'Sjálvvirkandi' dark: 'Myrkt tema' accessibility: 'Atkomuligheitsinnstillingar' - reducedColours: 'Minkaðir litir' + reducedColours: 'Kámari litir' reducedItems: 'Minkað tal av vístum lutum' ban: diff --git a/package.json b/package.json index d84116cef..760e6a9cb 100644 --- a/package.json +++ b/package.json @@ -20,7 +20,7 @@ "@aws-sdk/client-polly": "^3.525.0", "@aws-sdk/client-s3": "^3.525.0", "@floating-ui/vue": "^1.1.5", - "@fortawesome/fontawesome-pro": "git+ssh://git@gitlab.com:Avris/FontAwesomePro.git", + "@fortawesome/fontawesome-pro": "https://gitlab.com/Avris/FontAwesomePro", "@sentry/browser": "^7.109.0", "@sentry/cli": "^2.31.0", "@sentry/node": "^7.109.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 0f218089c..fbc78cd7d 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -21,7 +21,7 @@ importers: specifier: ^1.1.5 version: 1.1.5(vue@3.5.16(typescript@5.8.3)) '@fortawesome/fontawesome-pro': - specifier: git+ssh://git@gitlab.com:Avris/FontAwesomePro.git + specifier: https://gitlab.com/Avris/FontAwesomePro version: git+https://git@gitlab.com:Avris/FontAwesomePro.git#f00db606f659dca78b143b7bcab5671b2cb459a8 '@sentry/browser': specifier: ^7.109.0