CCM-10921: Add Lambda Boilerplate

Author: jamesthompson26-nhs

.github/workflows/stage-2-test.yaml

@@ -32,33 +32,89 @@ on:
         required: true
         type: string
 
+env:
+  AWS_REGION: eu-west-2
+  TERM: xterm-256color
+
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
+
 jobs:
+  check-generated-dependencies:
+    name: "Check generated dependencies"
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v4
+      - name: "Repo setup"
+        run: |
+          npm ci
+      - name: "Generate dependencies"
+        run: |
+          npm run generate-dependencies --workspaces --if-present
+          git diff --exit-code
   test-unit:
     name: "Unit tests"
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v4
+      - name: "Repo setup"
+        run: |
+          npm ci
+      - name: "Generate dependencies"
+        run: |
+          npm run generate-dependencies --workspaces --if-present
       - name: "Run unit test suite"
         run: |
           make test-unit
       - name: "Save the result of fast test suite"
-        run: |
-          echo "Nothing to save"
+        uses: actions/upload-artifact@v4
+        with:
+          name: unit-tests
+          path: "**/.reports/unit"
+          include-hidden-files: true
+        if: always()
+      - name: "Save the result of code coverage"
+        uses: actions/upload-artifact@v4
+        with:
+          name: code-coverage-report
+          path: ".reports/lcov.info"
   test-lint:
     name: "Linting"
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v4
+      - name: "Repo setup"
+        run: |
+          npm ci
+      - name: "Generate dependencies"
+        run: |
+          npm run generate-dependencies --workspaces --if-present
       - name: "Run linting"
         run: |
           make test-lint
-      - name: "Save the linting result"
+  test-typecheck:
+    name: "Typecheck"
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v4
+      - name: "Repo setup"
         run: |
-          echo "Nothing to save"
+          npm ci
+      - name: "Generate dependencies"
+        run: |
+          npm run generate-dependencies --workspaces --if-present
+      - name: "Run typecheck"
+        run: |
+          make test-typecheck
   test-coverage:
     name: "Test coverage"
     needs: [test-unit]
@@ -86,6 +142,10 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0 # Full history is needed to improving relevancy of reporting
+      - name: "Download coverage report for SONAR"
+        uses: actions/download-artifact@v4
+        with:
+          name: code-coverage-report
       - name: "Perform static analysis"
         uses: ./.github/actions/perform-static-analysis
         with:

.gitignore

@@ -11,5 +11,15 @@ version.json
 !project.code-workspace
 
 # Please, add your custom content below!
-node_modules
 .idea
+
+# dependencies
+node_modules
+.node-version
+*/node_modules
+/.pnp
+.pnp.js
+/build
+dist
+.DS_Store
+.reports

.gitleaksignore

@@ -10,3 +10,5 @@ b1f85a7faf54eaf66074d7a6daa093aefe6b3ebe:sdk/python/pyproject.toml:ipv4:25
 # Example ECDA key in OAPI spec
 4118582e5009685c1ac31fc664371649602a8a0e:specification/api/notify-supplier.yml:generic-api-key:115
 4118582e5009685c1ac31fc664371649602a8a0e:specification/api/notify-supplier-next.yml:generic-api-key:119
+28aa8bcf42e1af50ab2541a345be851b53dd0f00:specification/api/notify-supplier-next.yml:generic-api-key:119
+28aa8bcf42e1af50ab2541a345be851b53dd0f00:specification/api/notify-supplier.yml:generic-api-key:115

.tool-versions

@@ -1,13 +1,15 @@
 act 0.2.64
-gitleaks 8.18.4
+gitleaks 8.24.0
+jq 1.6
+nodejs 22.11.0
+pnpm 10.4.1
 pre-commit 3.6.0
+python 3.13.2
 terraform 1.9.2
 terraform-docs 0.19.0
 tfsec 1.28.10
+trivy 0.61.0
 vale 3.6.0
-python 3.13.2
-pnpm 10.4.1
-nodejs 20.18.2
 
 # ==============================================================================
 # The section below is reserved for Docker image versions.

docs/Gemfile.lock

@@ -29,6 +29,9 @@ GEM
     ffi (1.16.3)
     forwardable-extended (2.6.0)
     gemoji (4.1.0)
+    google-protobuf (4.29.2-arm64-darwin)
+      bigdecimal
+      rake (>= 13)
     google-protobuf (4.29.2-x86_64-linux)
       bigdecimal
       rake (>= 13)
@@ -92,6 +95,8 @@ GEM
       jekyll-seo-tag (~> 2.1)
     minitest (5.24.1)
     mutex_m (0.2.0)
+    nokogiri (1.18.4-arm64-darwin)
+      racc (~> 1.4)
     nokogiri (1.18.4-x86_64-linux-gnu)
       racc (~> 1.4)
     pathutil (0.16.2)
@@ -105,6 +110,8 @@ GEM
     rexml (3.3.9)
     rouge (4.2.1)
     safe_yaml (1.0.5)
+    sass-embedded (1.83.0-arm64-darwin)
+      google-protobuf (~> 4.28)
     sass-embedded (1.83.0-x86_64-linux-gnu)
       google-protobuf (~> 4.28)
     terminal-table (3.0.2)
@@ -115,6 +122,7 @@ GEM
     webrick (1.8.2)
 
 PLATFORMS
+  arm64-darwin-23
   x86_64-linux
 
 DEPENDENCIES