ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-26 04:15:48 -06:00
Code Issues Packages Projects Releases Wiki Activity

fix(release): scan publication-equivalent plugin artifacts

Browse Source
This commit is contained in:
Vincent Koc
2026-08-20 21:39:18 -07:00
parent dc15c4f660
commit dd9677012a
10 changed files with 556 additions and 1137 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/plugin-prerelease.yml
+5 -5
View File
@@ -359,13 +359,13 @@ jobs:
persist-credentials: false
submodules: false
- name: Setup trusted inert pack environment
- name: Setup candidate package build environment
uses: ./.github/actions/setup-node-env
with:
node-version: "24.x"
install-bun: "false"
- name: Pack inert plugin package input
- name: Build publication-equivalent plugin artifact
env:
CANDIDATE_SHA: ${{ needs.resolve-candidate.outputs.checkout_revision }}
EXTENSION_ID: ${{ matrix.extension_id }}
@@ -385,7 +385,7 @@ jobs:
--package-name "$PACKAGE_NAME" \
--tooling-sha "$TOOLING_SHA"
- name: Upload inert plugin package input
- name: Upload publication-equivalent plugin artifact
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
with:
name: plugin-npm-security-package-${{ needs.resolve-candidate.outputs.checkout_revision }}-${{ matrix.extension_id }}
@@ -426,14 +426,14 @@ jobs:
- name: Install trusted scanner dependencies
run: pnpm install --frozen-lockfile --prefer-offline --ignore-scripts
- name: Download inert plugin package inputs
- name: Download publication-equivalent plugin artifacts
continue-on-error: true
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
with:
pattern: plugin-npm-security-package-${{ needs.resolve-candidate.outputs.checkout_revision }}-*
path: ${{ runner.temp }}/plugin-npm-security-packages
- name: Scan inert plugin package inputs
- name: Scan publication-equivalent plugin artifacts
env:
CANDIDATE_SHA: ${{ needs.resolve-candidate.outputs.checkout_revision }}
EXPECTED_PACKAGES_JSON: ${{ needs.plugin-npm-security-plan.outputs.packages_json }}