DOCSEARCHbyAlgolia
Submit Docs

erzz Toolbox

website·Indexed 31 days ago

https://toolbox.erzz.com/

A collection of reusable GitHub workflows and actions for NodeJS projects. It includes workflows for NodeJS Quality (ESLint, Prettier, TSC, and tests), NodeJS Security (CodeQL SAST, Trivy vulnerability scanning, and license scanning), and automated release processes using semantic-release for versioning and CHANGELOG.md generation, as well as deployment to GitHub Pages.

Tokens
11.5K
Snippets
48
Records
91
Agent score
42%

What's inside erzz Toolbox

  1. Overview of GitHub Advanced Security (GHAS) components

    GitHub Advanced Security (GHAS) provides a suite of tools to identify and address security vulnerabilities:

    • Code Scanning: Analyzes code for vulnerabilities and coding errors, supporting 3rd party tool integration via SARIF reports.
    • Secret Scanning: Detects committed keys and tokens across Git history, issues, pull requests, and discussions. Includes push protection to block secrets before they are committed.
    • Dependabot: Identifies vulnerable dependencies and creates pull requests for patched versions. It can also be used for general version updates.

  2. Perform Security and Software Composition Analysis for NodeJS projects

    Use the NodeJS Security workflow to conduct security and software composition analysis (SCA) for NodeJS projects. This ensures that dependencies are scanned for known vulnerabilities and security risks.

  3. Automate the release process with Semantic Release

    Use Semantic Release to automate the entire release workflow, including versioning, generating CHANGELOG.md files, creating release notes, and publishing packages.

  4. Implement NodeJS Quality checks with ESLint, Prettier, and TSC

    For NodeJS projects, use the NodeJS Quality workflow to integrate ESLint for linting, Prettier for code formatting, TSC (TypeScript Compiler) for type checking, and application tests to ensure code quality and stability.

  5. Perform Security and Software Composition Analysis for NodeJS projects

    Use the NodeJS Security workflow to conduct security and software composition analysis (SCA) for NodeJS-based projects to identify vulnerabilities and manage dependencies.

  6. Automate releases with the semantic-release workflow

    The semantic-release workflow automates the creation of releases, semantic versioning, release notes, and changelog updates. It relies on a commit convention, defaulting to Conventional Commits, to determine if a release is necessary and which version to apply. It can also be configured to publish packages or binaries.

  7. Implement NodeJS Quality checks with ESLint, Prettier, and TSC

    For NodeJS projects, quality assurance is handled through a combination of ESLint for linting, Prettier for code formatting, TSC (TypeScript Compiler) for type checking, and dedicated application tests.

  8. Automate releases using Semantic Release

    Use Semantic Release to automate the entire release process, including calculating the next version number, generating CHANGELOG.md and release notes, and publishing packages.

  9. Implement NodeJS Quality workflows with TypeScript

    The NodeJS Quality workflow provides a standardized suite for maintaining code quality in NodeJS projects. It integrates ESLint for linting, Prettier for code formatting, the TypeScript Compiler (TSC) for type checking, and a framework for running application tests.

  10. Implement the node-quality workflow for NodeJS projects

    The node-quality workflow performs quality and style checks for NodeJS projects. It executes ESLint for code problems, Prettier for formatting, and a custom test command for application tests. For TypeScript projects, it also runs the TypeScript compiler (TSC) to check for type errors.
    jobs:
  node-quality:
    uses: erzz/toolbox/.github/workflows/node-quality.yml@v1

  11. Implement NodeJS Quality workflows

    The NodeJS Quality workflow provides a standardized set of tools to ensure code quality in NodeJS projects, including linting with ESLint, formatting with Prettier, type checking with TSC (TypeScript Compiler), and the execution of application tests.

  12. Perform Security and Software Composition Analysis for NodeJS projects

    Use the NodeJS Security workflow to conduct security audits and software composition analysis (SCA) for NodeJS projects to identify vulnerabilities in dependencies and code.