Skip to content

Conversation

@jonkoops
Copy link

Add new GitHub Action to validate catalog metadata files against plugin package.json files to ensure consistency during the dynamic plugin export workflow.

Features:

  • Validates packageName corresponds to a plugin in plugins-list.yaml
  • Validates version matches the plugin's package.json version
  • Validates OCI reference format in dynamicArtifact (tag and repository)
  • Validates backstage.supportedVersions matches dist-dynamic/package.json
  • Reports detailed errors to GitHub workflow summary
  • Provides JSON output for downstream workflow consumption

Also updates:

  • Integrate validate-metadata into export-dynamic workflow
  • Add metadata validation outputs to export-dynamic and export-workspaces
  • Update actions/checkout and actions/setup-node to latest versions
  • Add comprehensive test suite with 8 test scenarios

Add new GitHub Action to validate catalog metadata files against plugin
package.json files to ensure consistency during the dynamic plugin export
workflow.

Features:
- Validates `packageName` corresponds to a plugin in `plugins-list.yaml`
- Validates `version` matches the plugin's `package.json` version
- Validates OCI reference format in `dynamicArtifact` (tag and repository)
- Validates `backstage.supportedVersions` matches `dist-dynamic/package.json`
- Reports detailed errors to GitHub workflow summary
- Provides JSON output for downstream workflow consumption

Also updates:
- Integrate `validate-metadata` into `export-dynamic` workflow
- Add metadata validation outputs to `export-dynamic` and `export-workspaces`
- Update `actions/checkout` and `actions/setup-node` to latest versions
- Add comprehensive test suite with 8 test scenarios

Signed-off-by: Jon Koops <jonkoops@gmail.com>
@sonarqubecloud
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
1 Security Hotspot
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant