CCM-13038: set _authToken on gpr repo on CI

Author: bhansell1

.github/actions/node-install/action.yaml

@@ -0,0 +1,21 @@
+name: 'npm install and setup'
+description: 'Setup node, authenticate github package repository and perform clean npm install'
+
+inputs:
+  node_version:
+    description: 'Node.js version'
+    required: true
+
+runs:
+  using: 'composite'
+  steps:
+    - name: 'Use Node.js'
+      uses: actions/setup-node@v6
+      with:
+        node-version: '${{ inputs.node_version }}'
+
+    - name: 'Install dependencies'
+      shell: bash
+      run: |
+        ./scripts/set-github-token.sh
+        npm ci

.github/workflows/stage-2-test.yaml

@@ -49,9 +49,6 @@ jobs:
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
       - name: "Cache node_modules"
         uses: actions/cache@v4
         with:
@@ -61,10 +58,9 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-node-${{ inputs.nodejs_version }}-
       - name: "Repo setup"
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          npm ci
+        uses: ./.github/actions/node-install
+        with:
+          node-version: 22
       - name: "Generate dependencies"
         run: |
           npm run generate-dependencies --workspaces --if-present
@@ -76,10 +72,6 @@ jobs:
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          registry-url: 'https://npm.pkg.github.com'
       - name: "Cache node_modules"
         uses: actions/cache@v4
         with:
@@ -89,10 +81,9 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-node-${{ inputs.nodejs_version }}-
       - name: "Repo setup"
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          npm ci
+        uses: ./.github/actions/node-install
+        with:
+          node-version: 22
       - name: "Generate dependencies"
         run: |
           npm run generate-dependencies --workspaces --if-present
@@ -118,9 +109,6 @@ jobs:
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
       - name: "Cache node_modules"
         uses: actions/cache@v4
         with:
@@ -130,30 +118,22 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-node-${{ inputs.nodejs_version }}-
       - name: "Repo setup"
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          npm ci
+        uses: ./.github/actions/node-install
+        with:
+          node-version: 22
       - name: "Generate dependencies"
-        run: |
-          npm run generate-dependencies --workspaces --if-present
+        run: npm run generate-dependencies --workspaces --if-present
       - name: "Run PACT tests"
-        run: |
-          npm run test:pact --workspace tests
+        run: npm run test:pact --workspace tests
       - name: Publish Pact Contracts
-        run: |
-          ./scripts/publish-pact-contracts.sh
+        run: ./scripts/publish-pact-contracts.sh
   test-lint:
     name: "Linting"
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          registry-url: 'https://npm.pkg.github.com'
       - name: "Cache node_modules"
         uses: actions/cache@v4
         with:
@@ -163,10 +143,9 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-node-${{ inputs.nodejs_version }}-
       - name: "Repo setup"
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          npm ci
+        uses: ./.github/actions/node-install
+        with:
+          node-version: 22
       - name: "Generate dependencies"
         run: |
           npm run generate-dependencies --workspaces --if-present
@@ -180,10 +159,6 @@ jobs:
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          registry-url: 'https://npm.pkg.github.com'
       - name: "Cache node_modules"
         uses: actions/cache@v4
         with:
@@ -193,10 +168,9 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-node-${{ inputs.nodejs_version }}-
       - name: "Repo setup"
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          npm ci
+        uses: ./.github/actions/node-install
+        with:
+          node-version: 22
       - name: "Generate dependencies"
         run: |
           npm run generate-dependencies --workspaces --if-present

infrastructure/terraform/components/api/pre.sh

@@ -1,7 +1,10 @@
 # # This script is run before the Terraform apply command.
 # # It ensures all Node.js dependencies are installed, generates any required dependencies,
 # # and builds all Lambda functions in the workspace before Terraform provisions infrastructure.
-echo "Running pre.sh"
+
+ROOT_DIR="$(git rev-parse --show-toplevel)"
+
+$ROOT_DIR/scripts/set_github_packages_token.sh
 
 npm ci
 

scripts/set-github-token.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+npm config ls -l | grep '/npm.pkg.github.com/:_authToken' -q && echo "Github token already exists" && exit 0
+
+if [ -z "${GITHUB_TOKEN:-}" ]; then
+    read -p "Enter GitHub token: " GITHUB_TOKEN
+    export GITHUB_TOKEN
+fi
+
+npm config --location user set //npm.pkg.github.com/:_authToken $GITHUB_TOKEN