process-analytics · tbouffard · Sep 8, 2023 · Sep 8, 2023 · Sep 8, 2023 · Sep 8, 2023
diff --git a/.github/workflows/update_bpmn_visualization_version.yml b/.github/workflows/update_bpmn_visualization_version.yml
@@ -21,17 +21,39 @@ on:
         required: true
 
 jobs:
-  updateVersion:
+  compute-iife-bundle-integrity:
     runs-on: ubuntu-22.04
+    env:
+      VERSION: ${{ github.event.client_payload.version || github.event.inputs.version }}
+    outputs:
+      integrity-value: ${{ steps.compute-integrity.outputs.value }}
+    steps:
+      - name: Get the bpmn-visualization npm package
+        run: |
+          curl https://registry.npmjs.org/bpmn-visualization/-/bpmn-visualization-${{ env.VERSION }}.tgz -o bpmn-visualization.tgz
+          PACKAGE_CHECKSUM=$(npm view bpmn-visualization@${{ env.VERSION }} dist.integrity)
+          echo "PACKAGE_CHECKSUM=$PACKAGE_CHECKSUM"
+          tar -xvzf bpmn-visualization.tgz
+      - name: Compute IIFE bundle integrity
+        id: 'compute-integrity'
+        run: |
+          integrity="sha384-$(cat ./package/dist/bpmn-visualization.min.js | openssl dgst -sha384 -binary | openssl base64 -A)"
+          echo "integrity=$integrity"
+          echo "value=$integrity" >> "$GITHUB_OUTPUT"
+
+  update-version:
+    runs-on: ubuntu-22.04
+    needs: compute-iife-bundle-integrity
     env:
       VERSION: ${{ github.event.client_payload.version || github.event.inputs.version }}
       ARTIFACT_NAME: ${{ github.event.client_payload.artifact_name || github.event.inputs.artifact_name }}
       BUILD_DEMO_WORKFLOW_ID: ${{ github.event.client_payload.build_demo_workflow_id || github.event.inputs.build_demo_workflow_id }}
       BUILD_DEMO_REPO: ${{ github.event.client_payload.build_demo_repo || github.event.inputs.build_demo_repo }}
+      IIFE_BUNDLE_INTEGRITY: ${{needs.compute-iife-bundle-integrity.outputs.integrity-value}}
     steps:
       - uses: actions/checkout@v4
       - name: Update bpmn-visualization version in all examples
-        run: ./scripts/update-lib-version.bash ${{ env.VERSION }}
+        run: ./scripts/update-lib-version.bash ${{ env.VERSION }} ${{ env.IIFE_BUNDLE_INTEGRITY }}
       - name: Delete old Load and Navigation demo
         run: rm -rf demo/load-and-navigation
       - name: Download Load and Navigation demo ${{ env.VERSION }}

diff --git a/demo/draw-path/index.html b/demo/draw-path/index.html
@@ -26,7 +26,7 @@
     <link rel="stylesheet" href="./css/step.css" type="text/css">
     <script defer src="../../examples/static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="https://cdn.jsdelivr.net/npm/values.js@2.0.0/dist/index.umd.js" integrity="sha256-lNJnNIdh5oXecah6rOix/TxyGcOYnfkybx4Qii2uxSo="
             crossorigin="anonymous"></script>
     <script defer src="https://variancecharts.com/cdn/variance-noncommercial-standalone-6d26aa2.min.js" charset="UTF-8"></script>

diff --git a/demo/hacktoberfest-custom-themes/index.html b/demo/hacktoberfest-custom-themes/index.html
@@ -35,7 +35,7 @@
     </style>
     <script defer src="../../examples/static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <!-- load the example -->
     <script defer src="../../examples/static/js/diagram/bpmn-diagrams.js"></script>
     <script defer src="../../examples/static/js/style-identifiers.js"></script>

diff --git a/demo/monitoring-all-process-instances/index.html b/demo/monitoring-all-process-instances/index.html
@@ -24,7 +24,7 @@
     <link rel="stylesheet" href="./css/legend.css" type="text/css">
     <script defer src="../../examples/static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="https://cdn.jsdelivr.net/npm/values.js@2.0.0/dist/index.umd.js" integrity="sha256-lNJnNIdh5oXecah6rOix/TxyGcOYnfkybx4Qii2uxSo="
             crossorigin="anonymous"></script>
     <script defer src="https://variancecharts.com/cdn/variance-noncommercial-standalone-6d26aa2.min.js" charset="UTF-8"></script>

diff --git a/demo/prediction/index.html b/demo/prediction/index.html
@@ -30,7 +30,7 @@
 
     <script defer src="../../examples/static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="../../examples/static/js/diagram/bpmn-diagram-bpmn-spec-pizza.js"></script>
     <script defer src="../static/js/use-case.js"></script>
     <script defer src="./js/path.js"></script>

diff --git a/examples/custom-behavior/apply-css-classes/index.html b/examples/custom-behavior/apply-css-classes/index.html
@@ -86,7 +86,7 @@
         }
     </style>
     <script defer src="../../static/js/link-to-sources.js"></script>
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="../../static/js/diagram/bpmn-diagram-miwg-test-suite-c_1_1.js"></script>
     <script defer src="index.js"></script>
 </head>

diff --git a/examples/custom-behavior/call-activity-with-modal-on-mouse-over/index.html b/examples/custom-behavior/call-activity-with-modal-on-mouse-over/index.html
@@ -34,7 +34,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="./index.js"></script>
         <script defer src="./modal.js"></script>

diff --git a/examples/custom-behavior/call-activity-with-reload-on-dblclick/index.html b/examples/custom-behavior/call-activity-with-reload-on-dblclick/index.html
@@ -36,7 +36,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="./index.js"></script>
         <script defer src="./breadcrumbs.js"></script>

diff --git a/examples/custom-behavior/call-activity-with-tabs-on-click/index.html b/examples/custom-behavior/call-activity-with-tabs-on-click/index.html
@@ -36,7 +36,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="./index.js"></script>
     </head>

diff --git a/examples/custom-behavior/growing-sequence-flow/index.html b/examples/custom-behavior/growing-sequence-flow/index.html
@@ -57,7 +57,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="./index.js"></script>
     </head>

diff --git a/examples/custom-behavior/javascript-tooltip-and-popover/index.html b/examples/custom-behavior/javascript-tooltip-and-popover/index.html
@@ -50,7 +50,7 @@
 
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="index.js"></script>
     </head>

diff --git a/examples/custom-behavior/running-dashed-message-flow/index.html b/examples/custom-behavior/running-dashed-message-flow/index.html
@@ -57,7 +57,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="./index.js"></script>
     </head>

diff --git a/examples/custom-behavior/select-elements-by-bpmn-kind/index.html b/examples/custom-behavior/select-elements-by-bpmn-kind/index.html
@@ -55,7 +55,7 @@
         }
     </style>
     <script defer src="../../static/js/link-to-sources.js"></script>
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="../../static/js/diagram/bpmn-diagram-miwg-test-suite-a_4_1.js"></script>
     <script defer src="../../static/js/diagram/bpmn-diagram-miwg-test-suite-c_1_0.js"></script>
     <script defer src="../../static/js/diagram/bpmn-diagram-miwg-test-suite-c_1_1.js"></script>

diff --git a/examples/custom-bpmn-theme/custom-colors/index.html b/examples/custom-bpmn-theme/custom-colors/index.html
@@ -22,7 +22,7 @@
     <link rel="stylesheet" href="../../static/css/main.css" type="text/css">
     <script defer src="../../static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <!-- load the example -->
     <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
     <script defer src="../../static/js/style-identifiers.js"></script>

diff --git a/examples/custom-bpmn-theme/custom-edge-marker-colors/index.html b/examples/custom-bpmn-theme/custom-edge-marker-colors/index.html
@@ -36,7 +36,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="../../static/js/style-identifiers.js"></script>
         <script defer src="./index.js"></script>

diff --git a/examples/custom-bpmn-theme/custom-fonts/index.html b/examples/custom-bpmn-theme/custom-fonts/index.html
@@ -22,7 +22,7 @@
     <link rel="stylesheet" href="../../static/css/main.css" type="text/css">
     <script defer src="../../static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <!-- load the example -->
     <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
     <script defer src="../../static/js/style-identifiers.js"></script>

diff --git a/examples/custom-bpmn-theme/custom-user-task-icon/index.html b/examples/custom-bpmn-theme/custom-user-task-icon/index.html
@@ -22,7 +22,7 @@
     <link rel="stylesheet" href="../../static/css/main.css" type="text/css">
     <script defer src="../../static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <!-- load the example -->
     <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
     <script defer src="index.js"></script>

diff --git a/examples/diagram-navigation/diagram-fit-after-load/index.html b/examples/diagram-navigation/diagram-fit-after-load/index.html
@@ -53,7 +53,7 @@
     </style>
     <script defer src="../../static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
     <script defer src="index.js"></script>
 </head>

diff --git a/examples/diagram-navigation/diagram-fit-on-load/index.html b/examples/diagram-navigation/diagram-fit-on-load/index.html
@@ -40,7 +40,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="index.js"></script>
     </head>

diff --git a/examples/diagram-navigation/diagram-navigation/index.html b/examples/diagram-navigation/diagram-navigation/index.html
@@ -34,7 +34,7 @@
         }
     </style>
     <script defer src="../../static/js/link-to-sources.js"></script>
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
     <script defer src="./index.js"></script>
 </head>

diff --git a/examples/display-bpmn-diagram/load-local-bpmn-diagrams/index.html b/examples/display-bpmn-diagram/load-local-bpmn-diagrams/index.html
@@ -50,7 +50,7 @@
     </style>
     <script defer src="../../static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="index.js"></script>
 </head>
 <body>

diff --git a/examples/display-bpmn-diagram/load-remote-bpmn-diagrams/index.html b/examples/display-bpmn-diagram/load-remote-bpmn-diagrams/index.html
@@ -60,7 +60,7 @@
     </style>
     <script defer src="../../static/js/link-to-sources.js"></script>
     <!-- load bpmn-visualization -->
-    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
     <script defer src="index.js"></script>
 </head>
 <body>

diff --git a/examples/display-bpmn-diagram/pools-filter-on-load/index.html b/examples/display-bpmn-diagram/pools-filter-on-load/index.html
@@ -34,7 +34,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagram-pools-filter.js"></script>
         <script defer src="index.js"></script>
     </head>

diff --git a/examples/misc/compare-with-bpmn-js/index.html b/examples/misc/compare-with-bpmn-js/index.html
@@ -59,7 +59,7 @@
   <!-- load bpmn-js viewer distro (with pan and zoom) -->
   <script  defer src="https://cdn.jsdelivr.net/npm/bpmn-js@13.0.4/dist/bpmn-navigated-viewer.production.min.js" integrity="sha256-ir1JRKKdwrP2SbqZzwTL1j8LF1NBwlEwm49sUEsYxTg=" crossorigin="anonymous"></script>
   <!-- load bpmn-visualization -->
-  <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+  <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
   <script defer src="shared.js"></script>
   <script defer src="index.js"></script>
 </head>

diff --git a/examples/misc/compare-with-kie-editors-standalone/index.html b/examples/misc/compare-with-kie-editors-standalone/index.html
@@ -59,7 +59,7 @@
   <!-- load bpmn kie-editors-standalone -->
   <script defer src="https://cdn.jsdelivr.net/npm/@kie-tools/kie-editors-standalone@0.28.0/dist/bpmn/index.js" integrity="sha256-axAhGJVTnpft43YZxo/HDX7yK8GH5fMQhCfkQLGXr9w=" crossorigin="anonymous"></script>
   <!-- load bpmn-visualization -->
-  <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+  <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
   <script defer src="../compare-with-bpmn-js/shared.js"></script>
   <script defer src="index.js"></script>
 </head>

diff --git a/examples/overlays/add-remove/index.html b/examples/overlays/add-remove/index.html
@@ -48,7 +48,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="./index.js"></script>
     </head>

diff --git a/examples/overlays/add-stylized/index.html b/examples/overlays/add-stylized/index.html
@@ -43,7 +43,7 @@
         </style>
         <script defer src="../../static/js/link-to-sources.js"></script>
         <!-- load bpmn-visualization -->
-        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js"></script>
+        <script defer src="https://cdn.jsdelivr.net/npm/bpmn-visualization@0.39.0/dist/bpmn-visualization.min.js" integrity="sha384-E2ofmlxS5nRTDew9wflMEYwva2yN5z16RmzyDVzNy2IyEYqqOlqOmrLXkNZpXSOQ" crossorigin="anonymous"></script>
         <script defer src="../../static/js/diagram/bpmn-diagrams.js"></script>
         <script defer src="./index.js"></script>
     </head>