Philipp/cve-differential

Public Access

0 Fork 0

generated from Philipp/template-git

refactor(action): replace bash blocks with zero-dependency Node.js modules #17

Merged

Philipp merged 2 commits from feat-bash-to-js-refactor into main

2026-09-15 00:51:18 +02:00

Author	SHA1	Message	Date
Philipp	493d119b3c	Merge branch 'main' into feat-bash-to-js-refactor Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 1m43s Details CI Tests / JS Unit Tests (pull_request) Successful in 16s Details CI Tests / cross-check-mixed-sbom (sbom=false) (pull_request) Failing after 2m48s Details CI Tests / without-inbuild-sbom (sbom=false) (pull_request) Failing after 3m13s Details CI Tests / without-inbuild-sbom (sbom=true) (pull_request) Failing after 3m13s Details CI Tests / cross-check-mixed-sbom (sbom=true) (pull_request) Failing after 3m15s Details CI Tests / with-inbuild-sbom (sbom=false) (pull_request) Failing after 4m38s Details CI Tests / with-inbuild-sbom (sbom=true) (pull_request) Failing after 4m39s Details	2026-09-15 00:49:02 +02:00
Philipp	77357f0c3f	refactor(action): replace bash blocks with zero-dependency Node.js modules CI Tests / JS Unit Tests (pull_request) Successful in 46s Details Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 1m54s Details CI Tests / cross-check-mixed-sbom (sbom=false) (pull_request) Failing after 3m22s Details CI Tests / cross-check-mixed-sbom (sbom=true) (pull_request) Failing after 2m38s Details CI Tests / with-inbuild-sbom (sbom=false) (pull_request) Failing after 4m21s Details CI Tests / without-inbuild-sbom (sbom=true) (pull_request) Failing after 5m36s Details CI Tests / without-inbuild-sbom (sbom=false) (pull_request) Failing after 6m47s Details CI Tests / with-inbuild-sbom (sbom=true) (pull_request) Failing after 2m59s Details Extract ~450 lines of complex bash from action.yaml into modular, unit-tested Node.js scripts in lib/. All logic is covered by 26 native node:test unit tests (node --test, no external dependencies). Modules added: - lib/platforms.js - platform parsing and OCI manifest auto-discovery - lib/distro.js - SPDX PURL distro detection (os_name/os_version) - lib/verifier.js - Trivy arch mapping and SHA256 verification - lib/diagnostics.js - CI terminal diagnostic formatters - lib/install-trivy.js - Trivy install/verify entrypoint (replaces bash step) - lib/extract-sboms.js - SBOM extraction entrypoint (replaces bash step) - lib/scan-sboms.js - SBOM scan + diff entrypoint (replaces bash step) Tests added (all pass, auto-discovered by ode --test): - test/platforms.test.js - test/distro.test.js - test/verifier.test.js - test/diagnostics.test.js - test/orchestration.test.js action.yaml shrinks from 554 to 107 lines. Inputs are bridged to Node scripts via INPUT_* env vars so modules are fully decoupled from the Actions runner and testable in isolation.	2026-09-15 00:39:13 +02:00