mcp-context-forge/.github/workflows/lint-web.yml at main · TS0713/mcp-context-forge · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
# ===============================================================
# 🕸️  Web Lint & Static Analysis - Frontend Code Quality Gate
# ===============================================================
# Authors: Mihai Criveti
#   - runs each web linter in its own matrix job for visibility
#   - mirrors the actual CLI commands used locally (no `make`)
#   - ensures fast-failure isolation: one failure doesn't hide others
#   - installs tools per-job without package.json
#   - logs are grouped and plain-text for readability
# ---------------------------------------------------------------

name: Web Lint & Static Analysis

on:
  push:
    branches: ["main"]
  pull_request:
    branches: ["main"]

permissions:
  contents: read

jobs:
  lint-web:
    strategy:
      fail-fast: false
      matrix:
        include:
          # -------------------------------------------------------
          # 🧼 HTML/CSS/JS Linters & Validators
          # -------------------------------------------------------
          - id: htmlhint
            cmd: |
              npm install --no-save --legacy-peer-deps htmlhint
              npx htmlhint "mcpgateway/templates/*.html"

          - id: stylelint
            cmd: |
              npm install --no-save --legacy-peer-deps stylelint stylelint-config-standard @stylistic/stylelint-config stylelint-order
              npx stylelint "mcpgateway/static/*.css"

          - id: eslint
            cmd: |
              npm install --no-save --legacy-peer-deps \
                eslint \
                eslint-config-standard \
                eslint-config-prettier \
                eslint-plugin-import \
                eslint-plugin-n \
                eslint-plugin-prettier \
                eslint-plugin-promise \
                prettier
              npx eslint "mcpgateway/static/*.js"

          # -------------------------------------------------------
          # 🔒 Security Scanners
          # -------------------------------------------------------
          - id: retire
            cmd: |
              npm install --no-save --legacy-peer-deps retire
              npx retire --path mcpgateway/static

          - id: npm-audit
            cmd: |
              if [ ! -f package.json ]; then
                npm init -y >/dev/null
              fi
              npm audit --audit-level=high || true

          # -------------------------------------------------------
          # 🔍 Additional Code Quality Tools
          # -------------------------------------------------------
          - id: jshint
            cmd: |
              npm install --no-save --legacy-peer-deps jshint
              if [ -f .jshintrc ]; then
                npx jshint --config .jshintrc "mcpgateway/static/*.js"
              else
                npx jshint --esversion=11 "mcpgateway/static/*.js"
              fi

          - id: jscpd
            cmd: |
              npm install --no-save --legacy-peer-deps jscpd
              npx jscpd "mcpgateway/static/" "mcpgateway/templates/"

          # - id: markuplint
          #   cmd: |
          #     npm install --no-save --legacy-peer-deps markuplint
          #     npx markuplint mcpgateway/templates/*

    name: ${{ matrix.id }}
    runs-on: ubuntu-latest

    steps:
      # -----------------------------------------------------------
      # 0️⃣  Checkout
      # -----------------------------------------------------------
      - name: ⬇️  Checkout source
        uses: actions/checkout@v5
        with:
          fetch-depth: 1

      # -----------------------------------------------------------
      # 1️⃣  Node.js Setup
      # -----------------------------------------------------------
      - name: 📦  Set up Node.js
        uses: actions/setup-node@v5
        with:
          node-version: '20'

      # -----------------------------------------------------------
      # 2️⃣  Run Linter (install and execute in one step)
      # -----------------------------------------------------------
      - name: 🔍  Run ${{ matrix.id }}
        run: ${{ matrix.cmd }}

  # -------------------------------------------------------
  # 🐍 Python-based JS Security Scanner (separate job)
  # -------------------------------------------------------
  nodejsscan:
    name: nodejsscan
    runs-on: ubuntu-latest

    steps:
      # -----------------------------------------------------------
      # 0️⃣  Checkout
      # -----------------------------------------------------------
      - name: ⬇️  Checkout source
        uses: actions/checkout@v5
        with:
          fetch-depth: 1

      # -----------------------------------------------------------
      # 1️⃣  Python Setup
      # -----------------------------------------------------------
      - name: 🐍  Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: "3.12"
          cache: pip

      # -----------------------------------------------------------
      # 2️⃣  Install nodejsscan
      # -----------------------------------------------------------
      - name: 🔧  Install nodejsscan
        run: |
          python3 -m pip install --upgrade pip
          pip install nodejsscan

      # -----------------------------------------------------------
      # 3️⃣  Run nodejsscan
      # -----------------------------------------------------------
      - name: 🔒  Run nodejsscan
        run: |
          nodejsscan --directory ./mcpgateway/static