1.4.0

.github/workflows/build.yml

@@ -3,9 +3,20 @@ name: Build & Test
 on:
   push:
     branches: ['**']
+  pull_request:
   workflow_dispatch:
 
 jobs:
+  phylum_analyze:
+    if: ${{ github.event.pull_request }}
+    uses: radixdlt/public-iac-resuable-artifacts/.github/workflows/phylum-analyze.yml@main
+    permissions:
+      id-token: write
+      pull-requests: write
+      contents: read
+    secrets:
+      phylum_api_key: ${{ secrets.PHYLUM_API_KEY }}
+
   snyk_scan_deps_licences:
     runs-on: ubuntu-latest
     permissions:
@@ -74,7 +85,7 @@ jobs:
       - name: Generate SBOM # check SBOM can be generated but nothing is done with it
         uses: RDXWorks-actions/snyk-actions/node@master
         with:
-          args: --all-projects --org=${{ env.SNYK_PROJECTS_ORG_ID }} --format=cyclonedx1.4+json --json-file-output sbom.json
+          args: --all-projects --org=${{ env.SNYK_PROJECTS_ORG_ID }} --format=cyclonedx1.4+json > sbom.json
           command: sbom
 
   build:

.github/workflows/release.yml

@@ -35,16 +35,18 @@ jobs:
           parse_json: true
 
       - name: Github PreRelease
-        if: startsWith(github.ref_name, 'release/') || github.ref == 'refs/heads/develop'
+        if: github.ref == 'refs/heads/develop'
         env:
           VITE_GITHUB_REF_NAME: ${{ github.ref_name }}
           GITHUB_TOKEN: ${{ secrets.SEMANTIC_RELEASE_TOKEN }}
           GOOGLE_CLIENT_ID: ${{ env.GH_CLIENT_ID }}
           GOOGLE_CLIENT_SECRET: ${{ env.GH_CLIENT_SECRET }}
           GOOGLE_REFRESH_TOKEN: ${{ env.GH_REFRESH_TOKEN }}
-          GOOGLE_EXTENSION_ID: ${{ env.GH_EXTENSION_ID }}
-          TARGET_RELEASE: local
+          GOOGLE_EXTENSION_ID: ${{ env.GH_BETA_EXTENSION_ID }}
+          TARGET_RELEASE: default
         run: |
+          sed -i "s/    name:.*/    name: 'Radix Wallet Connector - BETA',/" vite.config.ts
+          sed -i -E '/^ *description:.*$/ {N; s/.*/    description: '"'"'THIS EXTENSION IS FOR BETA TESTING'"'"',/}' vite.config.ts
           sed -i "s/\${EXTENSION_ID}/$GOOGLE_EXTENSION_ID/g" release.config.cjs
           sed -i "s/\${TARGET}/$TARGET_RELEASE/g" release.config.cjs
           npx semantic-release --verifyConditions | tee out
@@ -78,7 +80,7 @@ jobs:
       - name: Generate SBOM
         uses: RDXWorks-actions/snyk-actions/node@master
         with:
-          args: --all-projects --org=${{ env.SNYK_PROJECTS_ORG_ID }} --format=cyclonedx1.4+json --json-file-output sbom.json
+          args: --all-projects --org=${{ env.SNYK_PROJECTS_ORG_ID }} --format=cyclonedx1.4+json > sbom.json
           command: sbom
       - name: Upload SBOM
         uses: RDXWorks-actions/upload-release-assets@c94805dc72e4b20745f543da0f62eaee7722df7a

.phylum_project

@@ -0,0 +1,7 @@
+id: 9d077c9b-7eb7-4c05-90ef-95d2a158a504
+name: connector-extension
+created_at: 2024-06-03T08:59:13.591622+02:00
+group_name: dApp-engineering
+depfiles:
+- path: ./package-lock.json
+  type: npm