TehRiehlDeal
781356a254
CI / secrets-scan (push) Successful in 5s
CI / sast (push) Successful in 14s
CI / vuln-scan (push) Successful in 15s
CI / test (push) Successful in 24s
CI / lint (push) Successful in 26s
CI / build-images (push) Successful in 3m18s
CI / image-scan (push) Successful in 26s
CI / push (push) Successful in 1m2s
Two unrelated changes that landed together: 1. Trivy image-scan was failing with "ignore file not found: /src/.trivyignore" — classic docker-in-docker mount issue. The runner's job container has the workspace at /workspace/<owner>/<repo>, but `docker run -v "$PWD:/src"` goes through the docker socket, where the daemon (running on the host) tries to mount /workspace/... — which only exists inside the job container, not on the host. The mount silently creates an empty dir, so trivy can't find the file. Install trivy as a binary on the runner directly and invoke it without docker. Now `.trivyignore` resolves against the workspace cwd. Applies to both server and client image scans plus both SBOM steps for consistency. 2. License added: AGPL-3.0-or-later. Restricts forks (including network/SaaS deployments) to also be AGPL — recognized as open source but with a meaningful copyleft. SPDX identifier set in root package.json. Canonical FSF text in LICENSE. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
36 lines
869 B
JSON
36 lines
869 B
JSON
{
|
|
"name": "teh-riehl-incremental",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"description": "Meta/dev-themed incremental game built on a TMT-compatible schema.",
|
|
"license": "AGPL-3.0-or-later",
|
|
"packageManager": "pnpm@9.12.0",
|
|
"engines": {
|
|
"node": ">=20.0.0",
|
|
"pnpm": ">=9.0.0"
|
|
},
|
|
"scripts": {
|
|
"build": "pnpm -r build",
|
|
"dev": "pnpm -r --parallel dev",
|
|
"test": "pnpm -r test",
|
|
"test:coverage": "pnpm -r test:coverage",
|
|
"lint": "pnpm -r lint",
|
|
"typecheck": "pnpm -r typecheck",
|
|
"format": "prettier --write .",
|
|
"format:check": "prettier --check ."
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^9.12.0",
|
|
"eslint": "^9.12.0",
|
|
"globals": "^15.11.0",
|
|
"prettier": "^3.3.3",
|
|
"typescript": "^5.6.2",
|
|
"typescript-eslint": "^8.8.1"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"multer": "^2.1.1"
|
|
}
|
|
}
|
|
}
|