Merge branch 'stage' of github.com:contentstack/migration-v2-node-server into dev

Author: AishDani

.github/CODEOWNERS

@@ -1,5 +1,8 @@
 * @contentstack/tso-migration-pr-reviewers
 .github/workflows/sca-scan.yml @contentstack/security-admin
-.github/workflows/sast-scan.yml @contentstack/security-admin
-.github/workflows/jira.yml @contentstack/security-admin
-**/.snyk @contentstack/security-admin
+**/.snyk @contentstack/security-admin
+.github/workflows/policy-scan.yml @contentstack/security-admin
+
+.github/workflows/issues-jira.yml @contentstack/security-admin
+
+.github/workflows/secrets-scan.yml @contentstack/security-admin

.github/workflows/issues-jira.yml

@@ -0,0 +1,31 @@
+name: Create Jira Ticket for Github Issue
+
+on:
+  issues:
+    types: [opened]
+
+jobs:
+  issue-jira:
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Login to Jira
+        uses: atlassian/gajira-login@master
+        env:
+          JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }}
+          JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }}
+          JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
+
+      - name: Create Jira Issue
+        id: create_jira
+        uses: atlassian/gajira-create@master
+        with:
+          project: ${{ secrets.JIRA_PROJECT }}
+          issuetype: ${{ secrets.JIRA_ISSUE_TYPE }}
+          summary: Github | Issue | ${{ github.event.repository.name }} | ${{ github.event.issue.title }}
+          description: |
+            *GitHub Issue:* ${{ github.event.issue.html_url }}
+            
+            *Description:*
+            ${{ github.event.issue.body }}
+          fields: "${{ secrets.ISSUES_JIRA_FIELDS }}"

.github/workflows/jira.yml

@@ -0,0 +1,46 @@
+name: Checks the security policy and configurations
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  security-policy:
+    if: github.event.repository.visibility == 'public'
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@master
+      - name: Checks for SECURITY.md policy file
+        run: |
+          if ! [[ -f "SECURITY.md" || -f ".github/SECURITY.md" ]]; then exit 1; fi
+  security-license:
+    if: github.event.repository.visibility == 'public'
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@master
+      - name: Checks for License file
+        run: |
+          expected_license_files=("LICENSE" "LICENSE.txt" "LICENSE.md" "License.txt")
+          license_file_found=false
+          current_year=$(date +"%Y")
+
+          for license_file in "${expected_license_files[@]}"; do
+              if  [ -f "$license_file" ]; then
+                 license_file_found=true
+                 # check the license file for the current year, if not exists, exit with error
+                  if  ! grep -q "$current_year" "$license_file"; then
+                      echo "License file $license_file does not contain the current year."
+                      exit 2
+                  fi
+                  break
+              fi        
+          done
+
+          if [ "$license_file_found" = false ]; then
+              echo "No license file found. Please add a license file to the repository."
+              exit 1
+          fi

.github/workflows/policy-scan.yml

@@ -0,0 +1,29 @@
+name: Secrets Scan
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  security-secrets:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: '2'
+          ref: '${{ github.event.pull_request.head.ref }}'
+      - run: |
+          git reset --soft HEAD~1
+      - name: Install Talisman
+        run: |
+          # Download Talisman
+          wget https://github.com/thoughtworks/talisman/releases/download/v1.37.0/talisman_linux_amd64 -O talisman
+
+          # Checksum verification
+          checksum=$(sha256sum ./talisman | awk '{print $1}')
+          if [ "$checksum" != "8e0ae8bb7b160bf10c4fa1448beb04a32a35e63505b3dddff74a092bccaaa7e4" ]; then exit 1; fi  
+
+          # Make it executable
+          chmod +x talisman
+      - name: Run talisman
+        run: |
+          # Run Talisman with the pre-commit hook
+          ./talisman --githook pre-commit

.github/workflows/sast-scan.yml

@@ -0,0 +1,7 @@
+fileignoreconfig:
+- filename: .github/workflows/secrets-scan.yml
+  ignore_detectors:
+    - filecontent
+- filename: remove-broken-imports.js
+  checksum: d9d3ca95b2f4df855c8811c73b5714e80b31e5e84b46affa0cb514dcfcc145bf
+version: "1.0"

.github/workflows/secrets-scan.yml

@@ -25,7 +25,7 @@
   },
   "homepage": "https://github.com/contentstack-expert-services/migration-v2-node-server#readme",
   "dependencies": {
-    "@contentstack/cli": "1.36.0",
+    "@contentstack/cli": "1.40.4",
     "@contentstack/json-rte-serializer": "^2.0.7",
     "@contentstack/marketplace-sdk": "^1.2.4",
     "axios": "^1.8.2",
@@ -77,4 +77,4 @@
     "typescript": "^5.4.3"
   },
   "keywords": []
-}
+}

.talismanrc

@@ -0,0 +1,20 @@
+# Use an official Node.js runtime as a base image
+FROM --platform=linux/amd64 node:24.0.1-slim
+
+# Set the working directory in the container
+WORKDIR /app
+
+# Copy package.json and package-lock.json to the working directory
+COPY package*.json ./
+
+# Install application dependencies
+RUN npm install
+
+# Copy the application code to the container
+COPY . .
+
+# Expose the port your app will run on
+EXPOSE 3000
+
+# Define the command to run your application
+CMD ["node", "index.js"] 

api/package.json

@@ -20,7 +20,6 @@
   "homepage": "https://github.com/contentstack-expert-services/migration-wordpress-xml#readme",
   "dependencies": {
     "@contentstack/json-rte-serializer": "^2.0.2",
-    "@sitecore-jss/sitecore-jss-cli": "^22.4.0",
     "ansi-colors": "^4.1.3",
     "axios": "^1.8.3",
     "chalk": "^4.1.0",
@@ -32,12 +31,11 @@
     "lodash": "^4.17.21",
     "mkdirp": "^1.0.4",
     "moment": "^2.30.1",
-    "pdf-stream": "^1.3.2",
     "request": "^2.88.2",
     "rimraf": "^4.1.2",
     "uid": "^2.0.2",
     "when": "^3.7.8",
     "winston": "^3.7.2",
-    "xml2js": "^0.4.23"
+    "xml2js": "^0.5.0"
   }
 }