mirror of
https://github.com/hanzoai/cookie-parser.git
synced 2026-09-24 16:58:03 +00:00
zeekayandHanzo Dev
91be66bb4f
github.com has no runner for hanzo-build-linux-amd64, so a caller under .github/workflows is a gate that can never be scheduled. This is the ~7-line caller on the plane that can (git.hanzo.ai git-runner fleet), pinned @v1. Co-authored-by: Hanzo Dev <[email protected]>
19 lines
871 B
YAML
19 lines
871 B
YAML
# Canonical CI/CD config for hanzoai/cookie-parser — read by the hanzoai/ci
|
|
# reusable workflow (.hanzo/workflows/cicd.yml) and by platform.hanzo.ai.
|
|
#
|
|
# LIBRARY: Express cookie-parsing middleware. No image, no deploy — it ships
|
|
# from a tag.
|
|
#
|
|
# The gate is the mocha suite. The part that has to be tested is the SIGNED
|
|
# cookie path: this middleware decides whether `s:value.signature` verifies
|
|
# against the app's secret, supports secret rotation via an array, and must
|
|
# leave the cookie in `req.cookies` rather than `req.signedCookies` when the
|
|
# signature does not check out. Getting that backwards is silent — the request
|
|
# still works, it is just trusting an attacker-supplied value — and only the
|
|
# suite can tell the two apart.
|
|
#
|
|
# `npm install`, not `npm ci`: this repo ships no package-lock.json.
|
|
test:
|
|
- name: test
|
|
run: npm install && npm test
|