Engage 5.0 - Refactor & Migrate Engage CLI to support ESM

.github/workflows/build.yml

@@ -12,9 +12,9 @@ jobs:
         with:
           node-version: "20.x"
       - name: Install dependencies
-        run: yarn
+        run: npm ci
       - name: Lint
-        run: yarn run gulp lint
+        run: npm run lint
 
   MacOsTest:
     needs: Lint
@@ -23,17 +23,19 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        nodeVersion: ["20.18.2", "22.13.1"]
+        nodeVersion: ["22.13.1", "24.14.1"]
         os: [macos-latest]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.nodeVersion }}
       - name: Install dependencies
-        run: yarn
+        run: npm ci
+      - name: Build CLI
+        run: npm run build
       - name: Run tests
-        run: yarn run test
+        run: npm run test
 
   WindowsTest:
     needs: Lint
@@ -42,17 +44,19 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        nodeVersion: ["20.18.2", "22.13.1"]
+        nodeVersion: ["22.13.1", "24.14.1"]
         os: [windows-latest]
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.nodeVersion }}
       - name: Install dependencies
-        run: yarn
+        run: npm ci
+      - name: Build CLI
+        run: npm run build
       - name: Run tests
-        run: yarn run test
+        run: npm run test
 
   UbuntuTest:
     needs: Lint
@@ -61,7 +65,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        nodeVersion: ["20.18.2", "22.13.1"]
+        nodeVersion: ["22.13.1", "24.14.1"]
         os: [ubuntu-latest]
     steps:
       - uses: actions/checkout@v4
@@ -71,6 +75,8 @@ jobs:
       - name: Install libsecret
         run: sudo apt-get install -y libsecret-1-0
       - name: Install dependencies
-        run: yarn
+        run: npm ci
+      - name: Build CLI
+        run: npm run build
       - name: Run tests
-        run: yarn run test
+        run: npm run test

.gitlab-ci.yml

@@ -3,19 +3,19 @@ image: docker:dind
 variables:
   PROJECT: "amplify-tooling"
 
-  # Fortify
-  FORTIFY_PROJECT: "10424"
-  FORTIFY_BUILD_ID: "axway-cli"
-  FORTIFY_INCLUDE: "packages/**/*.js"
-  FORTIFY_EXCLUDE: "**/test/**/*.js"
+  # SRM
+  SRM_PROJECT_NAME: "Catalog Commons - Axway CLI"
+  SRM_PROJECT_ID: "11"
 
   # Blackduck
-  BLACKDUCK_PROJECT_NAME: "Catalog Commons - Axway CLI"
+  BLACKDUCK_PROJECT_NAME: "$SRM_PROJECT_NAME"
   BLACKDUCK_CUSTOM_OPTIONS: --detect.excluded.detector.types=LERNA
 
-  # SRM
-  SRM_PROJECT_NAME: "$BLACKDUCK_PROJECT_NAME"
-  SRM_PROJECT_ID: "11"
+  # Checkmarx One
+  CX_CLIENT_ID: "axway-$SRM_PROJECT_NAME"
+  #CX_CLIENT_SECRET: defined in UI
+  CHECKMARX_PROJECT_NAME: "$SRM_PROJECT_NAME"
+  CHECKMARX_EXCLUDE: "!testdata,!*_test.go"
 
   ########################################
   # set up custom names for the pipelines of releases and nightly schedules
@@ -24,13 +24,13 @@ variables:
 
 include:
   - project: "apigov/gitlabci"
-    ref: $GITLAB_CICD_BLUE
+    ref: $GITLAB_CICD_GREEN
     file: "/.gitlab-ci-sonar.yml"
-  - project: "scurity/gitlabci"
-    ref: $SCURITY_GREEN
+  - project: "apigov/security/gitlabci"
+    ref: $SECURITY_CICD_GREEN
     file:
-      - "/.gitlab-ci-fortify.yml"
       - "/.gitlab-ci-blackduck.yml"
+      - "/.gitlab-ci-cxone.yml"
       - "/.gitlab-ci-security.yml"
 
 stages:
@@ -45,26 +45,28 @@ report-latest:
   needs:
     - fetch-blackduck:on-schedule
 
-report-snapshot-and-push:
+report-snapshot:
   needs:
-    - fetch-fortify
+    - blackduck-snapshot
+    - cxone-snapshot
     - fetch-third-party
 
 install_dependencies:
-  image: dockerhub.artifactory-phx.ecd.axway.int/node:20.11.1-bookworm-slim
+  image: dockerhub.artifactory-phx.ecd.axway.int/node:24.16.0-alpine
   stage: install
   script:
-    - npm install
+    - npm ci
   except:
     - schedules
 
 unit_tests:
-  image: dockerhub.artifactory-phx.ecd.axway.int/node:20.11.1-bookworm-slim
+  image: dockerhub.artifactory-phx.ecd.axway.int/node:24.16.0-alpine
   stage: test
   script:
-    - npm install gulp-cli -g
-    - npm install gulp
-    - npx gulp test
+    - apk add --no-cache libsecret-dev
+    - npm ci
+    - npm run build
+    - npm run test
   except:
     - schedules
   allow_failure: true

.security-profile.json

@@ -4,7 +4,7 @@
 	"repo_url": "https://github.com/appcelerator/amplify-tooling",
 	"security_guide": "https://docs.axway.com/bundle/axway_resources/page/amplify_api_management_platform_security_white_paper.html",
 	"requirements": {
-		"fortify": true,
+		"fortify": false,
 		"irius-risk": false,
 		"pentest": false,
 		"twistlock": false,

bin/run.js

@@ -4,4 +4,5 @@ enableCompileCache();
 
 import { execute, settings } from '@oclif/core';
 settings.performanceEnabled = true;
+settings.enableAutoTranspile = false;
 await execute({ dir: import.meta.url });