Merge branch 'SCA-scan' of github.com:SOOS-FAngelino/test-github-acti…

…ons into SCA-scan

.github/workflows/main.yml

@@ -1,11 +1,16 @@
-name: Example workflow using SOOS
-# Events required to engage workflow (add/edit this list as needed)
-on: push
+on: [push]
+
 jobs:
   synchronous-analysis-with-blocking-result:
+    permissions:
+      security-events: write # for uploading code scanning alert info
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status    
     name: SOOS SCA Scan
     runs-on: ubuntu-latest
     steps:
+    - uses: actions/setup-node@v4
+      with:
+        node-version: 20
     - uses: actions/checkout@master
     - name: Run SOOS - Scan for vulnerabilities
       uses: soos-io/soos-sca-github-action@v2

Package.swift

@@ -0,0 +1,100 @@
+// swift-tools-version:5.3
+// The swift-tools-version declares the minimum version of Swift required to build this package.
+
+import PackageDescription
+
+let package = Package(
+  name: "swift-vuln-test",
+  platforms: [
+    .iOS(.v12),
+    .macOS(.v10_14),
+    .tvOS(.v12),
+    .watchOS(.v5)
+  ],
+  products: [
+    .library(
+      name: "Apollo",
+      targets: ["Apollo"]),
+    .library(
+      name: "ApolloAPI",
+      targets: ["ApolloAPI"]),
+    .library(
+      name: "ApolloUtils",
+      targets: ["ApolloUtils"]),
+    .library(
+      name: "Apollo-Dynamic",
+      type: .dynamic,
+      targets: ["Apollo"]),
+    .library(
+      name: "ApolloCodegenLib",
+      targets: ["ApolloCodegenLib"]),
+    .library(
+      name: "ApolloSQLite",
+      targets: ["ApolloSQLite"]),
+    .library(
+      name: "ApolloWebSocket",
+      targets: ["ApolloWebSocket"]),
+  ],
+  dependencies: [
+    .package(url: "https://github.com/apple/swift-nio-extras.git", .exact("1.4.0")),
+	.package(url: "https://github.com/vapor/vapor.git", .exact("4.84.1")),
+  ],
+  targets: [
+    .target(
+      name: "Apollo",
+      dependencies: [
+        "ApolloAPI",
+        "ApolloUtils"
+      ],
+      exclude: [
+        "Info.plist"
+      ]),
+    .target(
+      name: "ApolloAPI",
+      dependencies: [],
+      exclude: [
+        "Info.plist",
+        "CodegenV1"
+      ]),
+    .target(
+      name: "ApolloUtils",
+      dependencies: [],
+      exclude: [
+        "Info.plist"
+      ]),
+    .target(
+      name: "ApolloCodegenLib",
+      dependencies: [
+        "ApolloUtils",
+        .product(name: "InflectorKit", package: "InflectorKit"),
+        .product(name: "Stencil", package: "Stencil"),
+      ],
+      exclude: [
+        "Info.plist",
+        "Frontend/JavaScript",
+      ],
+      resources: [
+        .copy("Frontend/dist/ApolloCodegenFrontend.bundle.js"),
+        .copy("Frontend/dist/ApolloCodegenFrontend.bundle.js.map")
+      ]),
+    .target(
+      name: "ApolloSQLite",
+      dependencies: [
+        "Apollo",
+        .product(name: "SQLite", package: "SQLite.swift"),
+      ],
+      exclude: [
+        "Info.plist"
+      ]),
+    .target(
+      name: "ApolloWebSocket",
+      dependencies: [
+        "Apollo",
+        "ApolloUtils",
+        .product(name: "Starscream", package: "Starscream"),
+      ],
+      exclude: [
+        "Info.plist"
+      ])
+  ]
+)

README.md

@@ -4,3 +4,6 @@ test PA-4849
 update 06
 PA-5051 fix
 22-23.1 prod
+test qa
+new commit
+new commit

output/readme.md

@@ -0,0 +1 @@
+