mirror of
https://github.com/pezkuwichain/pezkuwi-telegram-miniapp.git
synced 2026-11-02 00:41:08 +00:00
SatoshiQaziMuhammed
909dacd1af
* chore(deps): move vulnerable dependencies to patched versions Direct dev dependencies: vite ^5.4.1 -> ^6.4.3 (5.x has no patched release for the fs.deny bypass and launch-editor advisories; also lifts esbuild from 0.21.5 to 0.25.12), vitest and @vitest/coverage-v8 -> ^4.1.11, postcss -> ^8.5.23. Transitive packages refreshed within their existing ranges: brace-expansion, js-yaml, baseline-browser-mapping, qs, @humanfs/node, browserslist, postcss-selector-parser, nanoid, form-data, @babel/core, picomatch. Overrides with a floor at the patched version where a parent pins an old release: axios ^1.20.0 (tronweb pins 1.15.0) and ws ^8.21.0 (ethers pins 8.17.1). * fix(security): address open code scanning findings - auto-merge: pass workflow_run.head_branch through env instead of interpolating it into the shell script (code injection). - ci, deploy, code-quality: restrict GITHUB_TOKEN to contents: read. - telegram-bot: return a generic error body on failure; the error stays in the function log instead of being echoed to the caller. - p2p-e2e-test.py: stop printing a prefix of the service-role key.
50 lines
1.2 KiB
YAML
50 lines
1.2 KiB
YAML
name: Code Quality
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
complexity:
|
|
name: Code Complexity
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '20'
|
|
|
|
- name: Install complexity checker
|
|
run: npm install -g complexity-report
|
|
|
|
- name: Check complexity
|
|
run: |
|
|
cr src/**/*.ts src/**/*.tsx --format json > complexity-report.json || true
|
|
HIGH_COMPLEXITY=$(cat complexity-report.json 2>/dev/null | jq '[.reports[].functions[] | select(.cyclomatic > 15)] | length' 2>/dev/null || echo "0")
|
|
if [ "$HIGH_COMPLEXITY" -gt 0 ]; then
|
|
echo "::warning::Found $HIGH_COMPLEXITY functions with cyclomatic complexity > 15"
|
|
fi
|
|
|
|
duplicate-code:
|
|
name: Duplicate Code Detection
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '20'
|
|
|
|
- name: Install jscpd
|
|
run: npm install -g jscpd
|
|
|
|
- name: Check for duplicates
|
|
run: jscpd src/ --min-lines 10 --min-tokens 50 --threshold 5
|
|
continue-on-error: true
|