metamask-extension/.circleci/scripts/validate-lavamoat-policy.sh

#!/usr/bin/env bash

set -e
set -u
set -o pipefail

yarn lavamoat:auto:ci

if git diff --exit-code
then
  echo "LavaMoat policy is up-to-date"
else
  echo "LavaMoat policy requires updates"
  exit 1
fi
Add CI check to ensure LavaMoat policy is updated (#10493) A CI job has been added to ensure the `allow-scripts` config and the LavaMoat auto-generated policy is up-to-date. This will only run on release branches and the `master` branch, because it's too difficult a requirement to meet for each PR for contributors on macOS, due to differences in the dependency graph caused by optional dependencies. The `allow-scripts` and LavaMoat policy have both been updated using `yarn allow-scripts auto` and `yarn lavamoat:auto`. 2021-02-24 16:52:28 +01:00			`#!/usr/bin/env bash`

			`set -e`
			`set -u`
			`set -o pipefail`

Convert LavaMoat policy generation script to Yargs application (#15626) This PR converts `generate-lavamoat-policies.sh` to `.js` using Yargs. This makes it easier to only generate policy files for a specific build type (using the `-t` flag), which is often useful during Flask development. In addition, the `lavamoat:background:auto` scripts are renamed, and the main readme is updated with some useful tips. Note that `lavamoat:background:auto:dev` is removed and `lavamoat:background:auto` should be used during local development. 2022-08-19 01:09:26 +02:00			`yarn lavamoat:auto:ci`
Add CI check to ensure LavaMoat policy is updated (#10493) A CI job has been added to ensure the `allow-scripts` config and the LavaMoat auto-generated policy is up-to-date. This will only run on release branches and the `master` branch, because it's too difficult a requirement to meet for each PR for contributors on macOS, due to differences in the dependency graph caused by optional dependencies. The `allow-scripts` and LavaMoat policy have both been updated using `yarn allow-scripts auto` and `yarn lavamoat:auto`. 2021-02-24 16:52:28 +01:00
ci - improve lavamoat validation debug info (#12259) * ci - improve lavamoat validation debug info * Update validate-allow-scripts.sh * Update validate-lavamoat-policy.sh 2021-10-01 21:39:28 +02:00			`if git diff --exit-code`
Add CI check to ensure LavaMoat policy is updated (#10493) A CI job has been added to ensure the `allow-scripts` config and the LavaMoat auto-generated policy is up-to-date. This will only run on release branches and the `master` branch, because it's too difficult a requirement to meet for each PR for contributors on macOS, due to differences in the dependency graph caused by optional dependencies. The `allow-scripts` and LavaMoat policy have both been updated using `yarn allow-scripts auto` and `yarn lavamoat:auto`. 2021-02-24 16:52:28 +01:00			`then`
			`echo "LavaMoat policy is up-to-date"`
			`else`
			`echo "LavaMoat policy requires updates"`
			`exit 1`
			`fi`