Test integrations

.github/workflows/auto-merge-pr.yml

@@ -0,0 +1,20 @@
+name: Post-Check Actions
+on: [pull_request]
+
+permissions:
+  contents: write
+
+jobs:
+  dependabot-merge:
+    runs-on: ubuntu-latest
+    if: contains(github.head_ref, 'feature/update_cli')
+    steps:
+      - name: Enable auto-merge for Dependabot PRs
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.PERSONAL_ACCESS_TOKEN }}
+        run: gh pr merge --auto --merge "$PR_URL"
+      - name: Auto approve dependabot PRs
+        uses: hmarr/auto-approve-action@f0939ea97e9205ef24d872e76833fa908a770363 #v4
+        with:
+          github-token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}

.github/workflows/ci.yml

@@ -1,53 +1,39 @@
 name: AST Javascript wrapper CI
 
-on: [pull_request]
+on: [ pull_request ]
 jobs:
-  integration-tests:
+  unit-tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-        with:
-          lfs: true
-
-      - name: Install Git LFS
-        run: |
-          sudo apt-get update
-          sudo apt-get install git-lfs
-          git lfs install
-
-      - name: Use Node.js 22.11.0
-        uses: actions/[email protected]
-        with:
-          node-version: 22.11.0
-          registry-url: https://npm.pkg.github.com/
-      - run: npm ci
-      - name: Code Linting
-        run: npm run lint
-      - run: npm run build --if-present
-
-      - name: Check existence of cx-linux binary
-        run: |
-          if [ ! -f "src/main/wrapper/resources/cx-linux" ]; then
-            echo "cx-linux binary does not exist"; exit 1;
-          fi
+    - uses: actions/checkout@v4
+    - name: Use Node.js 22.11.0
+      uses: actions/[email protected]
+      with:
+        node-version: 22.11.0
+        registry-url: https://npm.pkg.github.com/
+    - run: npm ci
+    - name: Run Unit Tests
 
-      - name: Check existence of cx.exe binary
-        run: |
-          if [ ! -f "src/main/wrapper/resources/cx.exe" ]; then
-            echo "cx.exe binary does not exist"; exit 1;
-          fi
-
-      - name: Check existence of cx-mac binary
-        run: |
-          if [ ! -f "src/main/wrapper/resources/cx-mac" ]; then
-            echo "cx-mac binary does not exist"; exit 1;
-          fi
+      run: npm run test:unit
+  integration-tests:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: Use Node.js 22.11.0
+      uses: actions/[email protected]
+      with:
+        node-version: 22.11.0
+        registry-url: https://npm.pkg.github.com/
+    - run: npm ci
+    - name: Code Linting
+      run: npm run lint
+    - run: npm run build --if-present
 
-      - name: Run tests
-        env:
-          CX_CLIENT_ID: ${{ secrets.CX_CLIENT_ID}}
-          CX_CLIENT_SECRET: ${{ secrets.CX_CLIENT_SECRET}}
-          CX_BASE_URI: ${{ secrets.CX_BASE_URI }}
-          CX_TENANT: ${{ secrets.CX_TENANT }}
-          CX_APIKEY: ${{ secrets.CX_APIKEY }}
-        run: npm test
+    - name: Run tests
+      env:
+        CX_CLIENT_ID: ${{ secrets.CX_CLIENT_ID}}
+        CX_CLIENT_SECRET: ${{ secrets.CX_CLIENT_SECRET}}
+        CX_BASE_URI: ${{ secrets.CX_BASE_URI }}
+        CX_TENANT: ${{ secrets.CX_TENANT }}
+        CX_APIKEY: ${{ secrets.CX_APIKEY }}
+      run: npm test

.github/workflows/delete-packages-and-releases.yml

@@ -30,12 +30,12 @@ jobs:
 
           echo "Deleting all npm packages whose name ends with '-${{inputs.tag}}.0'"
 
-          VERSION_IDS=($(curl -L -H "Accept: application/vnd.github+json" -H "Authorization: Bearer ${{ secrets.PERSONAL_ACCESS_TOKEN }}" -H "X-GitHub-Api-Version: 2022-11-28" https://api.github.com/orgs/CheckmarxDev/packages/npm/ast-cli-javascript-wrapper/versions | jq '.[]|select(.name | contains("-${{inputs.tag}}.0"))|.id'))
+          VERSION_IDS=($(curl -L -H "Accept: application/vnd.github+json" -H "Authorization: Bearer ${{ secrets.PERSONAL_ACCESS_TOKEN }}" -H "X-GitHub-Api-Version: 2022-11-28" https://api.github.com/orgs/CheckmarxDev/packages/npm/ast-cli-javascript-wrapper-runtime-cli/versions | jq '.[]|select(.name | contains("-${{inputs.tag}}.0"))|.id'))
 
           for versionId in "${VERSION_IDS[@]}"
           do
              echo "Deleting version $versionId..."
-             curl -L -X DELETE -H "Accept: application/vnd.github+json" -H "Authorization: Bearer ${{ secrets.PERSONAL_ACCESS_TOKEN }}" -H "X-GitHub-Api-Version: 2022-11-28" "https://api.github.com/orgs/CheckmarxDev/packages/npm/ast-cli-javascript-wrapper/versions/$versionId"
+             curl -L -X DELETE -H "Accept: application/vnd.github+json" -H "Authorization: Bearer ${{ secrets.PERSONAL_ACCESS_TOKEN }}" -H "X-GitHub-Api-Version: 2022-11-28" "https://api.github.com/orgs/CheckmarxDev/packages/npm/ast-cli-javascript-wrapper-runtime-cli/versions/$versionId"
              echo "Version $versionId deleted successfully!"
           done
 

.github/workflows/nightly.yml

@@ -12,5 +12,5 @@ on:
 
 jobs:
   nightly:
-    uses: CheckmarxDev/ast-cli-javascript-wrapper/.github/workflows/release.yml@main
+    uses: CheckmarxDev/ast-cli-javascript-wrapper-runtime-cli/.github/workflows/release.yml@main
     secrets: inherit

.github/workflows/release.yml

@@ -1,4 +1,3 @@
-
 name: Javascript Wrapper Release
 
 on:
@@ -42,59 +41,75 @@ permissions:
 
 jobs:
   delete:
-    uses: CheckmarxDev/ast-cli-javascript-wrapper/.github/workflows/delete-packages-and-releases.yml@main
+    uses: CheckmarxDev/ast-cli-javascript-wrapper-runtime-cli/.github/workflows/delete-packages-and-releases.yml@main
     with:
       tag: ${{ inputs.jsTag }}
     secrets: inherit
     if: inputs.dev == true
   release:
     runs-on: ubuntu-latest
     env:
-          GITHUB_TOKEN: ${{ secrets.OR_GITHUB_TOKEN }}
-          BRANCH_NAME: npm-version-patch
+      GITHUB_TOKEN: ${{ secrets.OR_GITHUB_TOKEN }}
+      BRANCH_NAME: npm-version-patch
+    outputs:
+      TAG_NAME: ${{ steps.generate_tag_name.outputs.TAG_NAME }}
+      CLI_VERSION: ${{ steps.extract_cli_version.outputs.CLI_VERSION }}
     steps:
-
-      # CHECKOUT PROJECT
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          lfs: true  # Ensure LFS files are checked out
 
-      # GIT CONFIGURATION
-      - run: |
+      - name: Git Configuration 
+        run: |
           git config user.name github-actions
           git config user.email [email protected]
 
-      # SETUP NODE
       - uses: actions/[email protected]
         with:
           node-version: 22.11.0
           registry-url: https://npm.pkg.github.com/
 
-      # GET TAG NAME
       - name: Generate Tag name
+        id: generate_tag_name
         run: |
-          if [ ${{ inputs.dev }} == true ]; then
-            echo "TAG_NAME=$(npm version prerelease --preid=${{ inputs.jsTag }} --no-git-tag-version --allow-same-version)" >> $GITHUB_ENV
+          if [ "${{ inputs.dev }}" == "true" ]; then
+            TAG_NAME=$(npm version prerelease --preid=${{ inputs.jsTag }} --no-git-tag-version --allow-same-version)
           else
-            echo "TAG_NAME=$(npm version patch --no-git-tag-version)" >> $GITHUB_ENV
+            TAG_NAME=$(npm version patch --no-git-tag-version)
           fi
+
+          echo "Generated TAG_NAME: $TAG_NAME"
+          echo "TAG_NAME=$TAG_NAME" >> $GITHUB_ENV
+          echo "::set-output name=TAG_NAME::$TAG_NAME"
+
+      - name: Extract CLI version
+        id: extract_cli_version
+        run: |
+          CLI_VERSION=$(cat checkmarx-ast-cli.version | grep -Eo '^[0-9]+\.[0-9]+\.[0-9]+')
+          echo "CLI version being packed is $CLI_VERSION"
+          echo "CLI_VERSION=$CLI_VERSION" >> $GITHUB_ENV
+          echo "::set-output name=CLI_VERSION::$CLI_VERSION"
 
-      # DOWNLOAD CLI IF IT IS A DEV VERSION AND A CLI TAG WAS PROVIDED
-      - name: Download cli with tag ${{ inputs.cliTag }}
-        if: inputs.dev == true && inputs.cliTag != ''
+      - name: Check if CLI version is latest
+        id: check_latest_cli_version
         run: |
-          # Update binaries
-          chmod +x ./.github/scripts/update_cli.sh
-          ./.github/scripts/update_cli.sh ${{ inputs.cliTag }}
+          if [ "${{ inputs.dev }}" == "false" ] || [ -n "${{ inputs.cliTag }}" ] || [ "${{ github.ref }}" != "refs/heads/main" ]; then
+            exit 0
+          fi
+
+          LATEST_CLI_VERSION=$(curl -s https://api.github.com/repos/Checkmarx/ast-cli/releases/latest | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
+          if [ "$CLI_VERSION" = "$LATEST_CLI_VERSION" ]; then
+            echo "Confirm that the CLI version in the repository is up-to-date with the most recent release: $CLI_VERSION"
+          else
+            echo "The current repository contains a CLI version that differs from the latest released version: Expected $LATEST_CLI_VERSION, got $CLI_VERSION"
+            exit 1
+          fi
 
-      # RUN NPM INSTALL AND BUILD
       - name: NPM ci and build
         run: |
           npm ci
           npm run build
 
-      # CREATE PR FOR VERSION
       - name: Create Pull Request
         id: create_pr
         if: inputs.dev == false
@@ -107,32 +122,27 @@ jobs:
           base: main
           draft: false
 
-      # WAIT FOR PR CREATION
       - name: Wait for PR to be created
         id: pr
         if: inputs.dev == false
         uses: octokit/request-action@872c5c97b3c85c23516a572f02b31401ef82415d #v2.3.1
         with:
           route: GET /repos/${{ github.repository }}/pulls?head=${{ github.repository_owner }}:${{ env.BRANCH_NAME }}
 
-      # MERGE PR TO MAIN
       - name: Merge Pull Request
         if: inputs.dev == false
         uses: octokit/request-action@872c5c97b3c85c23516a572f02b31401ef82415d #v2.3.1
         with:
           route: PUT /repos/${{ github.repository }}/pulls/${{ steps.create_pr.outputs.pull-request-number }}/merge
           merge_method: squash
 
-      # PUSH TAGS IF IT IS A RELEASE
       - name: Push tag
         if: inputs.dev == false
         run: |
           git pull 
           git tag ${{env.TAG_NAME}}
           git push --tags
 
-
-      # PUBLISH NPM PACKAGE
       - name: Publish npm package
         run: |
           if [ ${{ inputs.dev }} == true ]; then
@@ -143,11 +153,34 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{secrets.PERSONAL_ACCESS_TOKEN}}
 
-      # CREATE RELEASE
       - name: Create Release
         uses: softprops/action-gh-release@a74c6b72af54cfa997e81df42d94703d6313a2d0 #v2
         with:
           name: ${{env.TAG_NAME}}
           tag_name: ${{env.TAG_NAME}}
           generate_release_notes: true
           prerelease: ${{ inputs.dev }}
+
+  notify:
+    if: inputs.dev == false
+    needs: release
+    uses: Checkmarx/plugins-release-workflow/.github/workflows/release-notify.yml@main
+    with:
+      product_name: Javascript Runtime Wrapper
+      release_version: ${{ needs.release.outputs.TAG_NAME }}
+      cli_release_version: ${{ needs.release.outputs.CLI_VERSION }}
+      release_author: "Phoenix Team"
+      release_url: https://github.com/CheckmarxDev/ast-cli-javascript-wrapper-runtime-cli/releases/tag/${{ needs.release.outputs.TAG_NAME }}
+      jira_product_name: JS_RUNTIME_WRAPPER
+    secrets: inherit
+
+  dispatch_auto_release:
+    name: Update ADO Extension With new Wrapper Version
+    if: inputs.dev == false
+    needs: notify
+    uses: Checkmarx/plugins-release-workflow/.github/workflows/dispatch-workflow.yml@main
+    with:
+      cli_version: ${{ needs.release.outputs.CLI_VERSION }}
+      is_cli_release: false
+      is_js_runtime_release: true
+    secrets: inherit