refactor: Github workflow updated

Author: antonyagustine

.github/workflows/jira.yml

@@ -7,7 +7,7 @@ jobs:
     if: ${{ github.actor == 'dependabot[bot]' || github.actor == 'snyk-bot' || contains(github.event.pull_request.head.ref, 'snyk-fix-')  || contains(github.event.pull_request.head.ref, 'snyk-upgrade-')}}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.5.3
       - name: Login into JIRA
         uses: atlassian/gajira-login@master
         env:

.github/workflows/release.yml

@@ -1,50 +1,63 @@
 name: Release
-
 on:
   push:
-    branches: [main]
-
+    branches:
+      - main
 jobs:
   build:
+    name: Build and upload
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
+      - name: Checkout
+        uses: actions/checkout@v3.5.3
         with:
-          node-version: "16.x"
-      - run: npm install
-
-      - name: get-package-details
-        id: package
-        uses: codex-team/action-nodejs-package-info@v1.1
-      - name: install npm packall
-        run: npm install npm-pack-all
+          fetch-depth: 0
+      - name: Setup Node.js
+        uses: actions/setup-node@v3.7.0
+        with:
+          node-version: "18.x"
+      - name: Installing dependencies
+        run: npm install
+      - name: Build
+        run: npm run prepack
+      - name: Upload dist
+        uses: actions/upload-artifact@v3.1.2
+        with:
+          name: lib
+          path: lib
 
-      - run: node node_modules/.bin/npm-pack-all
-      - uses: Klemensas/action-autotag@stable
-        id: update_tag
+  release:
+    name: Download dist and release
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3.5.3
         with:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-          tag_prefix: "v"
-      - name: Create Release
-        if: steps.update_tag.outputs.tagname
-        uses: actions/create-release@v1
-        id: create_release
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
+          fetch-depth: 0
+      - name: Setup Node.js
+        uses: actions/setup-node@v3.7.0
+        with:
+          node-version: "18.x"
+      - name: Installing dependencies
+        run: npm install
+      - name: Download dist
+        uses: actions/download-artifact@v3
         with:
-          tag_name: ${{ steps.update_tag.outputs.tagname }}
-          release_name: Release ${{ steps.update_tag.outputs.tagname }}
-          draft: false # Default value, but nice to set explicitly
-          prerelease: false # Default value, but nice to set explicitly
-      - name: Upload Release Asset
-        if: steps.update_tag.outputs.tagname
-        id: upload-release-asset
-        uses: actions/upload-release-asset@v1
+          name: lib
+          path: lib
+      - name: Display dirs
+        run: ls -R
+      - name: Release
+        id: release-plugin
+        uses: JS-DevTools/npm-publish@v2.2.0
+        with:
+          token: ${{ secrets.NPM_TOKEN }}
+      - name: get-npm-version
+        id: package-version
+        uses: martinbeentjes/npm-get-version-action@v1.3.1
+      - name: github-release
+        id: github-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          upload_url: ${{ steps.create_release.outputs.upload_url }} # This pulls from the CREATE RELEASE step above, referencing its ID to get its outputs object, which include a `upload_url`. See this blog post for more info: https://jasonet.co/posts/new-features-of-github-actions/#passing-data-to-future-steps
-          asset_path: ./contentstack-launch-cli-${{ steps.package.outputs.version }}.tgz
-          asset_name: contentstack-launch-cli-${{ steps.package.outputs.version }}.tgz
-          asset_content_type: application/tgz
+        run:  gh release create v${{ steps.release-plugin.outputs.version }} --title "Release ${{ steps.release-plugin.outputs.version }}" --generate-notes

.github/workflows/sast-scan.yml

@@ -6,6 +6,6 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.5.3
       - name: Horusec Scan
         run: docker run -v /var/run/docker.sock:/var/run/docker.sock -v $(pwd):/src horuszup/horusec-cli:latest horusec start -p /src -P $(pwd)