Skip to content

Commit 3922321

Browse files
AugustinMauroyJakobJingleheimerCopilot
authored
make website published (#25)
Co-authored-by: Jacob Smith <3012099+JakobJingleheimer@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
1 parent 92a3023 commit 3922321

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

64 files changed

+8192
-0
lines changed

‎.editorconfig‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
root = true
2+
3+
[*]
4+
indent_style = tab
5+
end_of_line = lf
6+
charset = utf-8
7+
trim_trailing_whitespace = true
8+
insert_final_newline = true
9+
tab_width = 4
10+
11+
[*.json]
12+
indent_style = space
13+
indent_size = 2
14+
max_line_length = 50
15+
16+
[*.{yaml,yml}]
17+
indent_style = space
18+
19+
[*.css]
20+
indent_style = tab
21+
ident_size = 2

‎.gitattributes‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Auto detect text files and perform LF normalization
2+
* text=auto eol=lf

‎.github/dependabot.yml‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
# yaml-language-server: $schema=https://json.schemastore.org/dependabot-2.0.json
2+
3+
version: 2
4+
updates:
5+
- package-ecosystem: github-actions
6+
commit-message:
7+
prefix: setup
8+
include: scope
9+
directory: /
10+
schedule:
11+
interval: monthly
12+
- package-ecosystem: npm
13+
commit-message:
14+
prefix: dep
15+
include: scope
16+
directory: /
17+
ignore:
18+
# Manually update major versions of @types/node with the version specified within .nvmrc
19+
- dependency-name: '@types/node'
20+
update-types: ['version-update:semver-major']
21+
open-pull-requests-limit: 10
22+
schedule:
23+
interval: monthly
24+
groups:
25+
next-js:
26+
patterns:
27+
- 'next*'
28+
react:
29+
patterns:
30+
- 'react'
31+
- 'react-dom'
32+
- '@types/react'
33+
- '@types/react-dom'
34+
nodejs-loaders:
35+
patterns:
36+
- '@nodejs-loaders/*'

‎.github/pull_request_template.md‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
## Description
2+
3+
<!--
4+
Thank you for your contribution! Please provide details for what and why this PR is needed.
5+
6+
If it is a bug-fix, please cover the reproduction(s) with unit test(s).
7+
-->
8+
9+
## Related Issue
10+
11+
## Checklist
12+
13+
<!--
14+
You can check the items by adding an `x` between the brackets, like this: - [x]
15+
-->
16+
17+
<!--
18+
See https://github.com/nodejs-loaders/nodejs-loaders.github.io/blob/main/CONTRIBUTING.md for tips opening a PR, like checking for lint.
19+
-->
20+
21+
The following have been checked:
22+
23+
- [ ] `node --run test:unit` passes
24+
- [ ] `node --run biome:ci` passes
25+
- [ ] `node --run build` passes
26+
- [ ] `node --run types:check` passes
27+
28+
<!-- Thank you for your contribution to the project. Please provide the details of your contribution and ensure that you have checked the items in the checklist. -->

‎.github/workflows/ci.yml‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
2+
3+
name: Tests
4+
5+
on:
6+
# we use devlop branch for now before publishing the website
7+
push:
8+
branches: [ "main", "devlop" ]
9+
pull_request:
10+
branches: [ "main", "devlop" ]
11+
12+
jobs:
13+
quality:
14+
runs-on: ubuntu-latest
15+
steps:
16+
- name: Harden Runner
17+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
18+
with:
19+
egress-policy: audit
20+
21+
- name: Checkout
22+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
23+
- uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
24+
with:
25+
node-version-file: '.nvmrc'
26+
- name: Setup Biome
27+
uses: biomejs/setup-biome@c016c38f26f2c4a6eb3662679143614a254263fd # v2.3.0
28+
with:
29+
version: latest
30+
- name: Run Biome
31+
run: biome ci .
32+
- name: Install Dependencies
33+
run: npm ci
34+
- name: Check types
35+
run: node --run types:check
36+
37+
test:
38+
runs-on: ubuntu-latest
39+
needs: quality
40+
steps:
41+
- name: Harden Runner
42+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
43+
with:
44+
egress-policy: audit
45+
46+
- name: Checkout
47+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
48+
- uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
49+
with:
50+
node-version-file: '.nvmrc'
51+
- name: Install Dependencies
52+
run: npm ci
53+
- name: Run Tests
54+
run: node --run test:unit

‎.github/workflows/codeql.yml‎

Lines changed: 84 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,84 @@
1+
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
2+
3+
# For most projects, this workflow file will not need changing; you simply need
4+
# to commit it to your repository.
5+
#
6+
# You may wish to alter this file to override the set of languages analyzed,
7+
# or to provide custom queries or build logic.
8+
#
9+
# ******** NOTE ********
10+
# We have attempted to detect the languages in your repository. Please check
11+
# the `language` matrix defined below to confirm you have the correct set of
12+
# supported CodeQL languages.
13+
#
14+
name: "CodeQL"
15+
16+
on:
17+
push:
18+
branches: ["main"]
19+
pull_request:
20+
# The branches below must be a subset of the branches above
21+
branches: ["main"]
22+
schedule:
23+
- cron: "0 0 * * 1"
24+
25+
permissions:
26+
contents: read
27+
28+
jobs:
29+
analyze:
30+
name: Analyze
31+
runs-on: ubuntu-latest
32+
permissions:
33+
actions: read
34+
contents: read
35+
security-events: write
36+
37+
strategy:
38+
fail-fast: false
39+
matrix:
40+
language: ["javascript", "typescript"]
41+
# CodeQL supports [ $supported-codeql-languages ]
42+
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
43+
44+
steps:
45+
- name: Harden Runner
46+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
47+
with:
48+
egress-policy: audit
49+
50+
- name: Checkout repository
51+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
52+
53+
# Initializes the CodeQL tools for scanning.
54+
- name: Initialize CodeQL
55+
uses: github/codeql-action/init@0701025a8b1600e416be4f3bb5a830b1aa6af01e # v3.28.6
56+
with:
57+
# https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#example-configuration
58+
languages: ${{ matrix.language }}
59+
config: |
60+
paths-ignore:
61+
- '**/*.test.js'
62+
- '**/*.test.mjs'
63+
- '**/*.bench.js'
64+
- '**/*.bench.mjs'
65+
66+
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
67+
# If this step fails, then you should remove it and run the build manually (see below)
68+
- name: Autobuild
69+
uses: github/codeql-action/autobuild@0701025a8b1600e416be4f3bb5a830b1aa6af01e # v3.28.6
70+
71+
# ℹ️ Command-line programs to run using the OS shell.
72+
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
73+
74+
# If the Autobuild fails above, remove it and uncomment the following three lines.
75+
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
76+
77+
# - run: |
78+
# echo "Run, Build Application using script"
79+
# ./location_of_script_within_repo/buildscript.sh
80+
81+
- name: Perform CodeQL Analysis
82+
uses: github/codeql-action/analyze@0701025a8b1600e416be4f3bb5a830b1aa6af01e # v3.28.6
83+
with:
84+
category: "/language:${{matrix.language}}"

‎.github/workflows/dependency-review.yml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
2+
3+
# Dependency Review Action
4+
#
5+
# This Action will scan dependency manifest files that change as part of a Pull Request,
6+
# surfacing known-vulnerable versions of the packages declared or updated in the PR.
7+
# Once installed, if the workflow run is marked as required,
8+
# PRs introducing known-vulnerable packages will be blocked from merging.
9+
#
10+
# Source repository: https://github.com/actions/dependency-review-action
11+
name: 'Dependency Review'
12+
on: [pull_request]
13+
14+
permissions:
15+
contents: read
16+
17+
jobs:
18+
dependency-review:
19+
runs-on: ubuntu-latest
20+
steps:
21+
- name: Harden Runner
22+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
23+
with:
24+
egress-policy: audit
25+
26+
- name: 'Checkout Repository'
27+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
28+
- name: 'Dependency Review'
29+
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0

‎.github/workflows/deploy.yml‎

Lines changed: 76 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,76 @@
1+
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
2+
3+
name: Build and Deploy to GitHub Pages
4+
5+
on:
6+
push:
7+
branches:
8+
- main
9+
10+
# Allows you to run this workflow manually from the Actions tab
11+
workflow_dispatch:
12+
13+
permissions:
14+
contents: read
15+
pages: write
16+
id-token: write
17+
18+
jobs:
19+
build:
20+
name: Build for GitHub Pages
21+
runs-on: ubuntu-latest
22+
23+
steps:
24+
- name: Git Checkout
25+
uses: actions/checkout@v4
26+
with:
27+
fetch-depth: 2
28+
29+
- name: Set up Node.js
30+
uses: actions/setup-node@v4
31+
with:
32+
node-version-file: '.nvmrc'
33+
cache: npm
34+
35+
- name: Install NPM packages
36+
run: npm ci
37+
38+
- name: Setup GitHub Pages
39+
uses: actions/configure-pages@v5
40+
41+
- name: Restore Cache
42+
uses: actions/cache/restore@v4
43+
with:
44+
path: .next/cache
45+
key: build-${{ hashFiles('**/package-lock.json') }}
46+
restore-keys: |
47+
build-${{ hashFiles('**/package-lock.json') }}
48+
enableCrossOsArchive: true
49+
50+
- name: Build Next.js
51+
run: node --run build
52+
- name: Save Cache
53+
uses: actions/cache/save@v4
54+
with:
55+
path: .next/cache
56+
key: build-${{ hashFiles('**/package-lock.json') }}
57+
enableCrossOsArchive: true
58+
59+
- name: Upload Artifact
60+
uses: actions/upload-pages-artifact@v3
61+
with:
62+
path: ./out # next.js build output
63+
64+
deploy:
65+
name: Deploy to GitHub Pages
66+
runs-on: ubuntu-latest
67+
needs: build
68+
69+
environment:
70+
name: github-pages
71+
url: ${{ steps.deployment.outputs.page_url }}
72+
73+
steps:
74+
- name: Deploy to GitHub Pages
75+
id: deployment
76+
uses: actions/deploy-pages@v4

‎.github/workflows/scorecard.yml‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
2+
3+
name: Scorecard supply-chain security
4+
on:
5+
# For Branch-Protection check. Only the default branch is supported. See
6+
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
7+
branch_protection_rule:
8+
# To guarantee Maintained check is occasionally updated. See
9+
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
10+
schedule:
11+
- cron: '35 6 * * 1'
12+
push:
13+
branches: [ "main" ]
14+
15+
# Declare default permissions as read only.
16+
permissions: read-all
17+
18+
jobs:
19+
analysis:
20+
name: Scorecard analysis
21+
runs-on: ubuntu-latest
22+
permissions:
23+
# Needed to upload the results to code-scanning dashboard.
24+
security-events: write
25+
# Needed to publish results and get a badge (see publish_results below).
26+
id-token: write
27+
28+
steps:
29+
- name: Harden Runner
30+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
31+
with:
32+
egress-policy: audit
33+
34+
- name: "Checkout code"
35+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
36+
with:
37+
persist-credentials: false
38+
39+
- name: "Run analysis"
40+
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
41+
with:
42+
results_file: results.sarif
43+
results_format: sarif
44+
publish_results: true
45+
46+
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
47+
# format to the repository Actions tab.
48+
- name: "Upload artifact"
49+
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
50+
with:
51+
name: SARIF file
52+
path: results.sarif
53+
retention-days: 5
54+
55+
# Upload the results to GitHub's code scanning dashboard (optional).
56+
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
57+
- name: "Upload to code-scanning"
58+
uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
59+
with:
60+
sarif_file: results.sarif

0 commit comments

Comments
 (0)