feat: introduce semantic release

Author: scott-es

.circleci/config.yml

@@ -1,31 +1,74 @@
-version: 2
+version: 2.1
+orbs:
+    snyk: snyk/[email protected]
 jobs:
-  build:
-    docker:
-      - image: circleci/node:10.16.3
-    steps:
-      - run:
-          name: "Setup Snyk"
-          command: |
-            sudo npm install -g snyk
-      - checkout
-      - run:
-          name: "Install deps"
-          command: |
-            npm install
-      - run:
-          name: "Run Lint"
-          command: |
-            npm run lint
-      - run:
-          name: "Run Tests"
-          command: |
-            npm test
-      - run:
-          name: "Snyk Test"
-          command: |
-            snyk test --org=customer-facing-tools
-      - run:
-          name: "Monitor"
-          command: |
-            snyk monitor --org=customer-facing-tools
+    build-test-publish:
+        docker:
+            - image: circleci/node:latest
+        steps:
+            - checkout
+            - run: npm install semantic-release @semantic-release/exec pkg --save-dev
+            - run: npm install
+            - run: npm test
+            - snyk/scan:
+                fail-on-issues: true
+                monitor-on-build: false
+                token-variable: SNYK_TOKEN
+            - run: npx semantic-release
+    build-test:
+        docker:
+            - image: circleci/node:latest
+        steps:
+            - checkout
+            - run: npm install
+            - run: npm test
+            - snyk/scan:
+                fail-on-issues: true
+                monitor-on-build: false
+                token-variable: SNYK_TOKEN
+            - run: npx tsc
+    build-test-from-fork:
+        docker:
+            - image: circleci/node:latest
+        steps:
+            - checkout
+            - run: npm install
+            - run: npm test
+            - run: npx tsc
+
+workflows:
+    version: 2.1
+    nightly:
+        triggers:
+          - schedule:
+              cron: "0 0 * * *"
+              filters:
+                branches:
+                  only:
+                    - master
+        jobs:
+            - build-test-publish:
+                context: SNYK
+
+    build-test-publish:
+        jobs:
+            - build-test-publish:
+                context: SNYK
+                filters:
+                    branches:
+                        only:
+                            - master
+    build-test:
+        jobs:
+            - build-test:
+                context: SNYK
+                filters:
+                    branches:
+                        ignore:
+                        - master
+                        - /pull\/[0-9]+/
+            - build-test-from-fork:
+                filters:
+                    branches:
+                        only:
+                        - /pull\/[0-9]+/

.snyk

@@ -1,5 +1,5 @@
 # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
-version: v1.14.1
+version: v1.19.0
 # ignores vulnerabilities until expiry date; change duration by modifying expiry date
 ignore:
   'npm:braces:20180219':
@@ -30,33 +30,10 @@ ignore:
         reason: no fix avail yet
         expires: '2020-04-11T08:48:22.379Z'
   SNYK-JS-DECOMPRESSTAR-559095:
-    - node-jq:
-        reason: no fix avail yet
-        expires: '2020-12-26T04:18:20.858Z'
-    - node-jq > download > decompress > decompress-tar:
-        reason: no fix avail yet
-        expires: '2020-12-26T04:18:20.858Z'
-    - node-jq > bin-build > decompress > decompress-tarbz2 > decompress-tar:
-        reason: no fix avail yet
-        expires: '2020-12-26T04:18:20.858Z'
-    - node-jq > download > decompress > decompress-tarbz2 > decompress-tar:
-        reason: no fix avail yet
-        expires: '2020-12-26T04:18:20.858Z'
-    - node-jq > bin-build > decompress > decompress-targz > decompress-tar:
-        reason: no fix avail yet
-        expires: '2020-12-26T04:18:20.858Z'
-    - node-jq > download > decompress > decompress-targz > decompress-tar:
-        reason: no fix avail yet
-        expires: '2020-12-26T04:18:20.858Z'
-    - node-jq > bin-build > download > decompress > decompress-tar:
-        reason: no fix avail yet
-        expires: '2020-08-26T18:40:13.635Z'
-    - node-jq > bin-build > download > decompress > decompress-tarbz2 > decompress-tar:
-        reason: no fix avail yet
-        expires: '2020-08-26T18:40:13.635Z'
-    - node-jq > bin-build > download > decompress > decompress-targz > decompress-tar:
-        reason: no fix available
-        expires: '2020-08-26T18:40:13.635Z'
+    - '*':
+        reason: None Given
+        expires: 2021-05-01T00:00:00.000Z
+        created: 2021-03-16T04:06:57.018Z
   SNYK-JS-MINIMIST-559764:
     - snyk > @snyk/update-notifier > latest-version > package-json > registry-auth-token > rc > minimist:
         reason: no fix avail yet