saf
saf copied to clipboard
Improve SAF CLI Release
Based on the SAF CLI release process documented in the wiki, the following have been identified as improvements.
Build Process
- [ ] Identify a mechanism/methodology to release the SAF CLI like the Jenkins build with parameters capability where the SAF CLI release can be build with parameter. These parameters are those values that currently require human intervention.
- [ ] Make the release process cyclical or on demand.
Process Steps to Automate
- [ ] Automate the artifact upload process for releases
SAF CLI
- [ ] Automate verifying the version of any @mitre dependencies in the package.json file.
- [ ] Configure oclif to properly generate the artifacts names as desired. Currently the process generates the artifacts names where the short sha is used within the name, we don't need the short sha in the name. See this issue and the oclif repo
- [ ] Automate the process of uploading the artifacts to GitHub, see here for a possible action
- [ ] Address any vulnerabilities identified by the
npm audit
command - including any dependency packages
SAF Actions
- [ ] Address unnecessary version bumps and 'v' prefixes to version tags, automate updates
Package Manager (brew)
- [ ] Update the homebrew repository documentation (readme) see this PR. Need to specify that Formulae is an online package browser for Homebrew – the macOS (and Linux) package manager.