Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Add npm builder workflow #881

Merged
merged 11 commits into from
Sep 26, 2022

Conversation

laurentsimon
Copy link
Collaborator

This PR adds a new workflow builder_node_slsa3.yml. It contains the structure to build upon for follow-up PRs that will create the node builder itself.

.github/workflows/builder_node_slsa3.yml Outdated Show resolved Hide resolved
.github/workflows/builder_node_slsa3.yml Outdated Show resolved Hide resolved
.github/workflows/builder_node_slsa3.yml Outdated Show resolved Hide resolved
.github/workflows/builder_node_slsa3.yml Show resolved Hide resolved
@ianlewis ianlewis added this to the Support for Node packages milestone Sep 21, 2022
set -euo pipefail

# npm ci <args>
./"$BUILDER_BINARY" ci \
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wonder if we can't combine the ci and build steps. especially if we will always be running npm ci

Copy link
Collaborator Author

@laurentsimon laurentsimon Sep 21, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One reason (maybe not a strong one) is if we want to turn on some OS-level hermeticity after downloading the dependencies in the future. It could arguably be done in the builder's code as well...

@laurentsimon
Copy link
Collaborator Author

friendly ping

@laurentsimon laurentsimon enabled auto-merge (squash) September 26, 2022 15:28
@laurentsimon laurentsimon merged commit c504038 into slsa-framework:main Sep 26, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants