Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ jobs:
- uses: actions/checkout@v4
if: ${{ steps.release-plugin.conclusion == 'success' }}
with:
ref: 'prod-qa-pipeline'
ref: 'main'
Copy link

Copilot AI Mar 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Checking out ref: 'main' here makes the later commit step depend on whatever main points to at execution time (it may advance after the workflow was triggered). To keep the release metadata commit consistent with the published version, consider checking out the triggering ref/SHA (e.g., ${{ github.sha }} / ${{ github.ref }}) unless you explicitly want to write to the latest main.

Suggested change
ref: 'main'
ref: ${{ github.sha }}

Copilot uses AI. Check for mistakes.
- uses: EndBug/add-and-commit@v9
if: ${{ steps.release-plugin.conclusion == 'success' }}
with:
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/sca-scan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,3 +13,6 @@ jobs:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
args: --all-projects --fail-on=all
json: true
continue-on-error: true
Copy link

Copilot AI Mar 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

continue-on-error: true makes the Snyk scan step non-blocking even though --fail-on=all is set. If the intent is to gate PRs via the subsequent contentstack/sca-policy step, ensure that action reliably fails the job on policy violations; otherwise vulnerabilities may slip through without failing the workflow.

Suggested change
continue-on-error: true
continue-on-error: false

Copilot uses AI. Check for mistakes.
- uses: contentstack/sca-policy@main
Copy link

Copilot AI Mar 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow uses contentstack/sca-policy@main. For supply-chain security and reproducibility, pin this action to a tagged release or (preferably) a full commit SHA instead of a moving branch ref.

Suggested change
- uses: contentstack/sca-policy@main
- uses: contentstack/sca-policy@v1

Copilot uses AI. Check for mistakes.
4 changes: 3 additions & 1 deletion src/config/index.ts
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@ const config = {
CSR: './',
ANGULAR: './dist',
NUXT: './.output',
ASTRO: './dist',
VUEJS: './dist',
REMIX: './build',
OTHER: './',
Expand All @@ -27,6 +28,7 @@ const config = {
{ name: 'CSR (Client-Side Rendered)', value: 'CSR' },
{ name: 'Angular', value: 'ANGULAR' },
{ name: 'Nuxt', value: 'NUXT' },
{ name: 'Astro', value: 'ASTRO' },
{ name: 'VueJs', value: 'VUEJS' },
{ name: 'Remix', value: 'REMIX' },
{ name: 'Other', value: 'OTHER' },
Expand All @@ -47,7 +49,7 @@ const config = {
VariablePreparationTypeOptions.SKIP_SETUP,
],
variableType: '',
supportedFrameworksForServerCommands: ['ANGULAR', 'OTHER', 'REMIX', 'NUXT'],
supportedFrameworksForServerCommands: ['ANGULAR', 'OTHER', 'REMIX', 'NUXT', 'ASTRO'],
supportedFileUploadMethods: ['last file upload', 'new file']

};
Expand Down
Loading