projen
Version:
CDK for software projects
644 lines • 118 kB
JavaScript
"use strict";
var _a;
Object.defineProperty(exports, "__esModule", { value: true });
exports.CodeArtifactAuthProvider = exports.Publisher = void 0;
exports.isAwsCodeArtifactRegistry = isAwsCodeArtifactRegistry;
const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
const component_1 = require("../component");
const constants_1 = require("../github/constants");
const workflows_model_1 = require("../github/workflows-model");
const node_package_1 = require("../javascript/node-package");
const runner_options_1 = require("../runner-options");
const version_1 = require("../version");
const PUBLIB_VERSION = "latest";
/**
* Checks if a URL's host matches the expected host exactly.
* @param url The URL to check
* @param expectedHost The expected host (e.g., "npm.pkg.github.com")
* @returns true if the URL's host matches exactly
*/
function urlHostMatches(url, expectedHost) {
if (!url)
return false;
try {
const parsed = new URL(url.includes("://") ? url : `https://${url}`);
return parsed.host === expectedHost;
}
catch {
return false;
}
}
const GITHUB_PACKAGES_NPM = "npm.pkg.github.com";
const GITHUB_PACKAGES_MAVEN = "maven.pkg.github.com";
const GITHUB_PACKAGES_NUGET = "nuget.pkg.github.com";
const ARTIFACTS_DOWNLOAD_DIR = "dist";
const AWS_CODEARTIFACT_REGISTRY_REGEX = /\.codeartifact\..*\.amazonaws\.com/;
const PUBLIB_TOOLCHAIN = {
js: {},
java: { java: { version: "11" } },
python: { python: { version: "3.x" } },
go: { go: { version: "^1.18.0" } },
dotnet: { dotnet: { version: "6.x" } },
};
const PUBLISH_JOB_PREFIX = "release_";
/**
* Implements GitHub jobs for publishing modules to package managers.
*
* Under the hood, it uses https://github.com/aws/publib
*/
class Publisher extends component_1.Component {
constructor(project, options) {
super(project);
// functions that create jobs associated with a specific branch
this._jobFactories = [];
this._gitHubPrePublishing = [];
this._gitHubPostPublishing = [];
// List of publish jobs added to the publisher
// Maps between the basename and the jobname
this.publishJobs = {};
this.buildJobId = options.buildJobId;
this.artifactName = options.artifactName;
this.publibVersion =
options.publibVersion ?? options.jsiiReleaseVersion ?? PUBLIB_VERSION;
this.jsiiReleaseVersion = this.publibVersion;
this.condition = options.condition;
this.dryRun = options.dryRun ?? false;
this.workflowNodeVersion = options.workflowNodeVersion ?? "lts/*";
this.workflowContainerImage = options.workflowContainerImage;
this.failureIssue = options.failureIssue ?? false;
this.failureIssueLabel = options.failureIssueLabel ?? "failed-release";
this.publishTasks = options.publishTasks ?? false;
this.runsOn = options.workflowRunsOn;
this.runsOnGroup = options.workflowRunsOnGroup;
}
/**
* Called by `Release` to add the publishing jobs to a release workflow
* associated with a specific branch.
* @param branch The branch name
* @param options Branch options
*
* @internal
*/
_renderJobsForBranch(branch, options) {
let jobs = {};
for (const factory of this._jobFactories) {
jobs = {
...jobs,
...factory(branch, options),
};
}
return jobs;
}
/**
* Adds pre publishing steps for the GitHub release job.
*
* @param steps The steps.
*/
addGitHubPrePublishingSteps(...steps) {
this._gitHubPrePublishing.push(...steps);
}
/**
* Adds post publishing steps for the GitHub release job.
*
* @param steps The steps.
*/
addGitHubPostPublishingSteps(...steps) {
this._gitHubPostPublishing.push(...steps);
}
/**
* Publish to git.
*
* This includes generating a project-level changelog and release tags.
*
* @param options Options
*/
publishToGit(options) {
const releaseTagFile = options.releaseTagFile;
const versionFile = options.versionFile;
const changelog = options.changelogFile;
const projectChangelogFile = options.projectChangelogFile;
const gitBranch = options.gitBranch ?? "main";
const taskName = gitBranch === "main" || gitBranch === "master"
? Publisher.PUBLISH_GIT_TASK_NAME
: `${Publisher.PUBLISH_GIT_TASK_NAME}:${gitBranch}`;
const publishTask = this.project.addTask(taskName, {
description: "Prepends the release changelog onto the project changelog, creates a release commit, and tags the release",
env: {
CHANGELOG: changelog,
RELEASE_TAG_FILE: releaseTagFile,
PROJECT_CHANGELOG_FILE: projectChangelogFile ?? "",
VERSION_FILE: versionFile,
},
condition: version_1.CHANGES_SINCE_LAST_RELEASE,
});
if (projectChangelogFile) {
publishTask.builtin("release/update-changelog");
}
publishTask.builtin("release/tag-version");
if (options.gitPushCommand !== "") {
const gitPushCommand = options.gitPushCommand || `git push --follow-tags origin ${gitBranch}`;
publishTask.exec(gitPushCommand);
}
return publishTask;
}
/**
* Creates a GitHub Release.
* @param options Options
*/
publishToGitHubReleases(options) {
const jobName = "github";
this.addPublishJob(jobName, (_branch, branchOptions) => {
return {
registryName: "GitHub Releases",
prePublishSteps: options.prePublishSteps ?? this._gitHubPrePublishing,
postPublishSteps: options.postPublishSteps ?? this._gitHubPostPublishing,
publishTools: options.publishTools,
permissions: {
contents: workflows_model_1.JobPermission.WRITE,
},
needs: Object.entries(this.publishJobs)
.filter(([name, _]) => name != jobName)
.map(([_, job]) => job),
environment: options.githubEnvironment ?? branchOptions.environment,
run: this.githubReleaseCommand(options, branchOptions),
workflowEnv: {
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}",
},
};
});
}
/**
* Publishes artifacts from `js/**` to npm.
* @param options Options
*/
publishToNpm(options = {}) {
if (options.trustedPublishing && options.npmTokenSecret) {
throw new Error("Cannot use npmTokenSecret when trustedPublishing is enabled. " +
"Trusted publishing uses OIDC tokens for authentication instead of NPM tokens. " +
"Remove the npmTokenSecret option to use trusted publishing.");
}
const trustedPublisher = options.trustedPublishing ? "true" : undefined;
const npmProvenance = options.npmProvenance ? "true" : undefined;
const isGitHubPackages = urlHostMatches(options.registry, GITHUB_PACKAGES_NPM);
const isAwsCodeArtifact = isAwsCodeArtifactRegistry(options.registry);
const isAwsCodeArtifactWithOidc = isAwsCodeArtifact &&
options.codeArtifactOptions?.authProvider ===
CodeArtifactAuthProvider.GITHUB_OIDC;
const needsIdTokenWrite = isAwsCodeArtifactWithOidc || trustedPublisher || npmProvenance;
const npmToken = trustedPublisher
? undefined
: (0, node_package_1.defaultNpmToken)(options.npmTokenSecret, options.registry);
if (options.distTag) {
this.project.logger.warn("The `distTag` option is deprecated. Use the npmDistTag option instead.");
}
const prePublishSteps = options.prePublishSteps ?? [];
if (isAwsCodeArtifactWithOidc) {
if (options.codeArtifactOptions?.accessKeyIdSecret ||
options.codeArtifactOptions?.secretAccessKeySecret) {
throw new Error("access and secret key pair should not be provided when using GITHUB_OIDC auth provider for AWS CodeArtifact");
}
else if (!options.codeArtifactOptions?.roleToAssume) {
throw new Error('"roleToAssume" property is required when using GITHUB_OIDC for AWS CodeArtifact options');
}
const regionCaptureRegex = /codeartifact\.(.+)\.amazonaws\.com/;
const region = options.registry?.match(regionCaptureRegex)?.[1];
prePublishSteps.push({
name: "Configure AWS Credentials via GitHub OIDC Provider",
uses: "aws-actions/configure-aws-credentials@v5",
with: {
"role-to-assume": options.codeArtifactOptions.roleToAssume,
"aws-region": region,
},
});
}
this.addPublishJob("npm", (_branch, branchOptions) => {
if (branchOptions.npmDistTag && options.distTag) {
throw new Error("cannot set branch-level npmDistTag and npmDistTag in publishToNpm()");
}
return {
publishTools: PUBLIB_TOOLCHAIN.js,
prePublishSteps,
postPublishSteps: options.postPublishSteps ?? [],
environment: options.githubEnvironment ?? branchOptions.environment,
run: this.publibCommand("publib-npm"),
registryName: "npm",
env: {
NPM_DIST_TAG: branchOptions.npmDistTag ?? options.distTag ?? "latest",
NPM_REGISTRY: options.registry,
NPM_CONFIG_PROVENANCE: npmProvenance,
NPM_TRUSTED_PUBLISHER: trustedPublisher,
},
permissions: {
idToken: needsIdTokenWrite ? workflows_model_1.JobPermission.WRITE : undefined,
contents: workflows_model_1.JobPermission.READ,
packages: isGitHubPackages ? workflows_model_1.JobPermission.WRITE : undefined,
},
workflowEnv: {
NPM_TOKEN: npmToken ? secret(npmToken) : undefined,
// if we are publishing to AWS CodeArtifact, pass AWS access keys that will be used to generate NPM_TOKEN using AWS CLI.
AWS_ACCESS_KEY_ID: isAwsCodeArtifact && !isAwsCodeArtifactWithOidc
? secret(options.codeArtifactOptions?.accessKeyIdSecret ??
"AWS_ACCESS_KEY_ID")
: undefined,
AWS_SECRET_ACCESS_KEY: isAwsCodeArtifact && !isAwsCodeArtifactWithOidc
? secret(options.codeArtifactOptions?.secretAccessKeySecret ??
"AWS_SECRET_ACCESS_KEY")
: undefined,
AWS_ROLE_TO_ASSUME: isAwsCodeArtifact && !isAwsCodeArtifactWithOidc
? options.codeArtifactOptions?.roleToAssume
: undefined,
},
};
});
}
/**
* Publishes artifacts from `dotnet/**` to NuGet Gallery.
* @param options Options
*/
publishToNuget(options = {}) {
if (options.trustedPublishing && options.nugetApiKeySecret) {
throw new Error("Cannot use nugetApiKeySecret when trustedPublishing is enabled. " +
"Trusted publishing uses OIDC tokens for authentication instead of API keys. " +
"Remove the nugetApiKeySecret option to use trusted publishing.");
}
const isGitHubPackages = urlHostMatches(options.nugetServer, GITHUB_PACKAGES_NUGET);
const needsIdTokenWrite = options.trustedPublishing;
this.addPublishJob("nuget", (_branch, branchOptions) => ({
publishTools: PUBLIB_TOOLCHAIN.dotnet,
prePublishSteps: options.prePublishSteps ?? [],
postPublishSteps: options.postPublishSteps ?? [],
environment: options.githubEnvironment ?? branchOptions.environment,
run: this.publibCommand("publib-nuget"),
registryName: "NuGet Gallery",
permissions: {
contents: workflows_model_1.JobPermission.READ,
packages: isGitHubPackages ? workflows_model_1.JobPermission.WRITE : undefined,
idToken: needsIdTokenWrite ? workflows_model_1.JobPermission.WRITE : undefined,
},
env: {
NUGET_TRUSTED_PUBLISHER: options.trustedPublishing
? "true"
: undefined,
},
workflowEnv: {
NUGET_API_KEY: options.trustedPublishing
? undefined
: secret(isGitHubPackages
? "GITHUB_TOKEN"
: (options.nugetApiKeySecret ?? "NUGET_API_KEY")),
NUGET_SERVER: options.nugetServer ?? undefined,
NUGET_USERNAME: options.trustedPublishing
? secret(options.nugetUsernameSecret ?? "NUGET_USERNAME")
: undefined,
},
}));
}
/**
* Publishes artifacts from `java/**` to Maven.
* @param options Options
*/
publishToMaven(options = {}) {
const isGitHubPackages = urlHostMatches(options.mavenRepositoryUrl, GITHUB_PACKAGES_MAVEN);
const isGitHubActor = isGitHubPackages && options.mavenUsername == undefined;
const mavenServerId = options.mavenServerId ?? (isGitHubPackages ? "github" : "central-ossrh");
if (isGitHubPackages && mavenServerId != "github") {
throw new Error('publishing to GitHub Packages requires the "mavenServerId" to be "github"');
}
if (mavenServerId === "central-ossrh" && options.mavenEndpoint != null) {
throw new Error('Custom endpoints are not supported when publishing to Maven Central (mavenServerId: "central-ossrh"). Please remove "mavenEndpoint" from the options.');
}
this.addPublishJob("maven", (_branch, branchOptions) => ({
registryName: "Maven Central",
publishTools: PUBLIB_TOOLCHAIN.java,
prePublishSteps: options.prePublishSteps ?? [],
postPublishSteps: options.postPublishSteps ?? [],
environment: options.githubEnvironment ?? branchOptions.environment,
run: this.publibCommand("publib-maven"),
env: {
MAVEN_ENDPOINT: options.mavenEndpoint,
MAVEN_SERVER_ID: mavenServerId,
MAVEN_REPOSITORY_URL: options.mavenRepositoryUrl,
},
workflowEnv: {
MAVEN_GPG_PRIVATE_KEY: isGitHubPackages
? undefined
: secret(options.mavenGpgPrivateKeySecret ?? "MAVEN_GPG_PRIVATE_KEY"),
MAVEN_GPG_PRIVATE_KEY_PASSPHRASE: isGitHubPackages
? undefined
: secret(options.mavenGpgPrivateKeyPassphrase ??
"MAVEN_GPG_PRIVATE_KEY_PASSPHRASE"),
MAVEN_PASSWORD: secret(options.mavenPassword ??
(isGitHubPackages ? "GITHUB_TOKEN" : "MAVEN_PASSWORD")),
MAVEN_USERNAME: isGitHubActor
? "${{ github.actor }}"
: secret(options.mavenUsername ?? "MAVEN_USERNAME"),
MAVEN_STAGING_PROFILE_ID: isGitHubPackages
? undefined
: secret(options.mavenStagingProfileId ?? "MAVEN_STAGING_PROFILE_ID"),
},
permissions: {
contents: workflows_model_1.JobPermission.READ,
packages: isGitHubPackages ? workflows_model_1.JobPermission.WRITE : undefined,
},
}));
}
/**
* Publishes wheel artifacts from `python` to PyPI.
* @param options Options
*/
publishToPyPi(options = {}) {
if (options.trustedPublishing &&
(options.twineUsernameSecret || options.twinePasswordSecret)) {
throw new Error("Cannot use twineUsernameSecret and twinePasswordSecret when trustedPublishing is enabled. " +
"Trusted publishing uses OIDC tokens for authentication instead of username/password credentials. " +
"Remove the twineUsernameSecret and twinePasswordSecret options to use trusted publishing.");
}
let permissions = { contents: workflows_model_1.JobPermission.READ };
const prePublishSteps = options.prePublishSteps ?? [];
let workflowEnv = {};
const isAwsCodeArtifact = isAwsCodeArtifactRegistry(options.twineRegistryUrl);
if (isAwsCodeArtifact) {
const { domain, account, region } = awsCodeArtifactInfoFromUrl(options.twineRegistryUrl);
const { authProvider, roleToAssume, accessKeyIdSecret, secretAccessKeySecret, } = options.codeArtifactOptions ?? {};
const useOidcAuth = authProvider === CodeArtifactAuthProvider.GITHUB_OIDC;
if (useOidcAuth) {
if (!roleToAssume) {
throw new Error('"roleToAssume" property is required when using GITHUB_OIDC for AWS CodeArtifact options');
}
permissions = { ...permissions, idToken: workflows_model_1.JobPermission.WRITE };
prePublishSteps.push({
name: "Configure AWS Credentials via GitHub OIDC Provider",
uses: "aws-actions/configure-aws-credentials@v5",
with: {
"role-to-assume": roleToAssume,
"aws-region": region,
},
});
}
prePublishSteps.push({
name: "Generate CodeArtifact Token",
run: `echo "TWINE_PASSWORD=$(aws codeartifact get-authorization-token --domain ${domain} --domain-owner ${account} --region ${region} --query authorizationToken --output text)" >> $GITHUB_ENV`,
env: useOidcAuth
? undefined
: {
AWS_ACCESS_KEY_ID: secret(accessKeyIdSecret ?? "AWS_ACCESS_KEY_ID"),
AWS_SECRET_ACCESS_KEY: secret(secretAccessKeySecret ?? "AWS_SECRET_ACCESS_KEY"),
},
});
workflowEnv = { TWINE_USERNAME: "aws" };
}
else if (options.trustedPublishing) {
permissions = { ...permissions, idToken: workflows_model_1.JobPermission.WRITE };
workflowEnv = {
PYPI_TRUSTED_PUBLISHER: "true",
};
// attestations default to true, only disable when explicitly requested
if (options.attestations === false) {
workflowEnv.PYPI_DISABLE_ATTESTATIONS = "true";
}
}
else {
workflowEnv = {
TWINE_USERNAME: secret(options.twineUsernameSecret ?? "TWINE_USERNAME"),
TWINE_PASSWORD: secret(options.twinePasswordSecret ?? "TWINE_PASSWORD"),
};
}
this.addPublishJob("pypi", (_branch, branchOptions) => ({
registryName: "PyPI",
publishTools: PUBLIB_TOOLCHAIN.python,
permissions,
prePublishSteps,
postPublishSteps: options.postPublishSteps ?? [],
environment: options.githubEnvironment ?? branchOptions.environment,
run: this.publibCommand("publib-pypi"),
env: {
TWINE_REPOSITORY_URL: options.twineRegistryUrl,
},
workflowEnv,
}));
}
/**
* Adds a go publishing job.
* @param options Options
*/
publishToGo(options = {}) {
const prePublishSteps = options.prePublishSteps ?? [];
const workflowEnv = {};
if (options.githubUseSsh) {
workflowEnv.GITHUB_USE_SSH = "true";
workflowEnv.SSH_AUTH_SOCK = "/tmp/ssh_agent.sock";
prePublishSteps.push({
name: "Setup GitHub deploy key",
run: 'ssh-agent -a ${SSH_AUTH_SOCK} && ssh-add - <<< "${GITHUB_DEPLOY_KEY}"',
env: {
GITHUB_DEPLOY_KEY: secret(options.githubDeployKeySecret ?? "GO_GITHUB_DEPLOY_KEY"),
SSH_AUTH_SOCK: workflowEnv.SSH_AUTH_SOCK,
},
});
}
else {
workflowEnv.GITHUB_TOKEN = secret(options.githubTokenSecret ?? "GO_GITHUB_TOKEN");
}
this.addPublishJob("golang", (_branch, branchOptions) => ({
publishTools: PUBLIB_TOOLCHAIN.go,
prePublishSteps: prePublishSteps,
postPublishSteps: options.postPublishSteps ?? [],
environment: options.githubEnvironment ?? branchOptions.environment,
run: this.publibCommand("publib-golang"),
registryName: "GitHub Go Module Repository",
env: {
GIT_BRANCH: options.gitBranch,
GIT_USER_NAME: options.gitUserName ?? constants_1.DEFAULT_GITHUB_ACTIONS_USER.name,
GIT_USER_EMAIL: options.gitUserEmail ?? constants_1.DEFAULT_GITHUB_ACTIONS_USER.email,
GIT_COMMIT_MESSAGE: options.gitCommitMessage,
},
workflowEnv: workflowEnv,
}));
}
addPublishJob(
/**
* The basename of the publish job (should be lowercase).
* Will be extended with a prefix.
*/
basename, factory) {
const jobname = `${PUBLISH_JOB_PREFIX}${basename}`;
this.publishJobs[basename] = jobname;
this._jobFactories.push((branch, branchOptions) => {
const opts = factory(branch, branchOptions);
if (jobname in this._jobFactories) {
throw new Error(`Duplicate job with name "${jobname}"`);
}
const commandToRun = this.dryRun
? `echo "DRY RUN: ${opts.run}"`
: opts.run;
const requiredEnv = new Array();
// jobEnv is the env we pass to the github job (task environment + secrets/expressions).
const jobEnv = { ...opts.env };
const workflowEnvEntries = Object.entries(opts.workflowEnv ?? {}).filter(([_, value]) => value != undefined);
for (const [env, expression] of workflowEnvEntries) {
requiredEnv.push(env);
jobEnv[env] = expression;
}
if (this.publishTasks) {
const branchSuffix = branch === "main" || branch === "master" ? "" : `:${branch}`;
// define a task which can be used through `projen publish:xxx`.
const task = this.project.addTask(`publish:${basename.toLocaleLowerCase()}${branchSuffix}`, {
description: `Publish this package to ${opts.registryName}`,
env: opts.env,
requiredEnv: requiredEnv,
});
// first verify that we are on the correct branch
task.exec(`test "$(git branch --show-current)" = "${branch}"`);
// run commands
task.exec(commandToRun);
}
const steps = [
{
name: "Download build artifacts",
uses: "actions/download-artifact@v5",
with: {
name: constants_1.BUILD_ARTIFACT_NAME,
path: ARTIFACTS_DOWNLOAD_DIR, // this must be "dist" for publib
},
},
{
name: "Restore build artifact permissions",
continueOnError: true,
run: [
`cd ${ARTIFACTS_DOWNLOAD_DIR} && setfacl --restore=${constants_1.PERMISSION_BACKUP_FILE}`,
].join("\n"),
},
...opts.prePublishSteps,
{
name: "Release",
// it would have been nice if we could just run "projen publish:xxx" here but that is not possible because this job does not checkout sources
run: commandToRun,
env: jobEnv,
},
...opts.postPublishSteps,
];
const perms = opts.permissions ?? { contents: workflows_model_1.JobPermission.READ };
const container = this.workflowContainerImage
? {
image: this.workflowContainerImage,
}
: undefined;
if (this.failureIssue) {
steps.push(...[
{
name: "Extract Version",
if: "${{ failure() }}",
id: "extract-version",
shell: "bash",
run: 'echo "VERSION=$(cat dist/version.txt)" >> $GITHUB_OUTPUT',
},
{
name: "Create Issue",
if: "${{ failure() }}",
uses: "imjohnbo/issue-bot@v3",
with: {
labels: this.failureIssueLabel,
title: `Publishing v\${{ steps.extract-version.outputs.VERSION }} to ${opts.registryName} failed`,
body: "See https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}",
},
env: {
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}",
},
},
]);
Object.assign(perms, { issues: workflows_model_1.JobPermission.WRITE });
}
return {
[jobname]: {
...(opts.environment ? { environment: opts.environment } : {}),
tools: {
node: { version: this.workflowNodeVersion },
...opts.publishTools,
},
name: `Publish to ${opts.registryName}`,
permissions: perms,
if: this.condition,
needs: [this.buildJobId, ...(opts.needs ?? [])],
...(0, runner_options_1.filteredRunsOnOptions)(this.runsOn, this.runsOnGroup),
container,
steps,
},
};
});
}
publibCommand(command) {
return `npx -p publib@${this.publibVersion} ${command}`;
}
githubReleaseCommand(options, branchOptions) {
const changelogFile = options.changelogFile;
const releaseTagFile = options.releaseTagFile;
// create a github release
const releaseTag = `$(cat ${releaseTagFile})`;
const ghReleaseCommand = [
`gh release create ${releaseTag}`,
"-R $GITHUB_REPOSITORY",
`-F ${changelogFile}`,
`-t ${releaseTag}`,
"--target $GITHUB_SHA",
];
if (branchOptions.prerelease) {
ghReleaseCommand.push("-p");
}
const ghRelease = ghReleaseCommand.join(" ");
// release script that does not error when re-releasing a given version
const idempotentRelease = [
"errout=$(mktemp);",
`${ghRelease} 2> $errout && true;`,
"exitcode=$?;",
'if [ $exitcode -ne 0 ] && ! grep -q "Release.tag_name already exists" $errout; then',
"cat $errout;",
"exit $exitcode;",
"fi",
].join(" ");
return idempotentRelease;
}
}
exports.Publisher = Publisher;
_a = JSII_RTTI_SYMBOL_1;
Publisher[_a] = { fqn: "projen.release.Publisher", version: "0.99.17" };
Publisher.PUBLISH_GIT_TASK_NAME = "publish:git";
function secret(secretName) {
return `\${{ secrets.${secretName} }}`;
}
/**
* Options for authorizing requests to a AWS CodeArtifact npm repository.
*/
var CodeArtifactAuthProvider;
(function (CodeArtifactAuthProvider) {
/**
* Fixed credentials provided via Github secrets.
*/
CodeArtifactAuthProvider["ACCESS_AND_SECRET_KEY_PAIR"] = "ACCESS_AND_SECRET_KEY_PAIR";
/**
* Ephemeral credentials provided via Github's OIDC integration with an IAM role.
* See:
* https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc.html
* https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services
*/
CodeArtifactAuthProvider["GITHUB_OIDC"] = "GITHUB_OIDC";
})(CodeArtifactAuthProvider || (exports.CodeArtifactAuthProvider = CodeArtifactAuthProvider = {}));
/**
* Evaluates if the `registryUrl` is a AWS CodeArtifact registry.
* @param registryUrl url of registry
* @returns true for AWS CodeArtifact
*/
function isAwsCodeArtifactRegistry(registryUrl) {
return Boolean(registryUrl && AWS_CODEARTIFACT_REGISTRY_REGEX.test(registryUrl));
}
/**
* Parses info about code artifact domain from given AWS code artifact url
* @param url Of code artifact domain
* @returns domain, account, and region of code artifact domain
*/
function awsCodeArtifactInfoFromUrl(url) {
const captureRegex = /([a-z0-9-]+)-(.+)\.d\.codeartifact\.(.+)\.amazonaws\.com/;
const matches = url?.match(captureRegex) ?? [];
const [_, domain, account, region] = matches;
return { domain, account, region };
}
//# sourceMappingURL=data:application/json;base64,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