Added support for echo (AST-162045) (#213)

* Update .npmrc with new registry and auth settings

* Modify CI workflow for echohq registry integration

Updated CI workflow to use echohq registry and added authentication steps.

* Refactor release.yml for clarity and consistency

Removed unnecessary whitespace and updated comments in the release workflow.

* Fix error message for lockfile verification

Correct error message formatting in release workflow

* removing extra space

* correcting the secret variable of echo

* vulnerability fixes

* updating ast-cli version

Author: cx-atish-jadhav

.github/workflows/ci.yml

@@ -23,8 +23,16 @@ jobs:
       uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
       with:
         node-version: 22.11.0
-        registry-url: https://npm.pkg.github.com/
+        registry-url: https://npm.echohq.com/
+    - name: Configure echohq auth (both hosts)
+      env:
+        ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
+      run: |
+        npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
+        npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
     - run: npm ci --ignore-scripts
+      env:
+        ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
     - name: Run Unit Tests
 
       run: npm run test:unit
@@ -46,8 +54,16 @@ jobs:
       uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
       with:
         node-version: 22.11.0
-        registry-url: https://npm.pkg.github.com/
+        registry-url: https://npm.echohq.com/
+    - name: Configure echohq auth (both hosts)
+      env:
+        ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
+      run: |
+        npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
+        npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
     - run: npm ci --ignore-scripts
+      env:
+        ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
     - name: Code Linting
       run: npm run lint
     - run: npm run build --if-present

.github/workflows/release.yml

@@ -146,7 +146,11 @@ jobs:
           fi
 
       - name: NPM ci and build
+        env:
+          ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
         run: |
+          npm config set //npm.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
+          npm config set //packages.echohq.com/:_authToken "${ECHO_LIBRARIES_ACCESS_KEY}"
           npm ci --ignore-scripts
           npm run build
 

.npmrc

@@ -1,3 +1,5 @@
 # Default registry for most packages
 registry=https://npm.echohq.com/
-ignore-scripts=true
+//packages.echohq.com/:_authToken=
+always-auth=true
+ignore-scripts=true

checkmarx-ast-cli.checksums

@@ -1,7 +1,7 @@
 {
-  "windows_x64": "c0a2c3db0927004b8fe015117359dfd49766d4e1b61e1641e42f1e286a3a5e25",
-  "darwin_x64":  "f24712bee593ea6a253dc0c9551ca5b51e6b1336baf3c3abc5281a4e93d5f3b7",
-  "linux_x64":   "a8cf3222c88590cd355f4af6f9d10938f8ff834c44c1a80cf126a5d3f039c764",
-  "linux_arm64": "763a3a42d2c75d8272dd90f686162233509272bc026e46e3d3079878ce76d9c2",
-  "linux_armv6": "d897fb4260d70eed1329c0c50919e98a32ab19daf7836898faaa20de52252383"
+  "windows_x64": "b93d0564891bf33231a1195cc246605c80f701d19d4c934a2986df341924a029",
+  "darwin_x64":  "b79cb1e6e7832a584f2e96c30046a4dd970ecb1c87cbb526eb799340321ed3d8",
+  "linux_x64":   "861112f7b78a9e84d8d4b4490c0dc6f6f716e5863246111db9c1c24efcf760db",
+  "linux_arm64": "99c47d3686f84daf485a2e724f8d967d380aa00b04c83c3a438f5339e9cf111c",
+  "linux_armv6": "76a2e0b27e4d1d70b2f98785d0ec003bdfe53da021e95b970f4ffac44d99e930"
 }

checkmarx-ast-cli.version

@@ -1 +1 @@
-2.3.54
+2.3.55

package-lock.json

@@ -63,7 +63,7 @@
     "minimatch": "^3.1.2",
     "underscore": "^1.13.8",
     "picomatch": "^2.3.2",
-    "brace-expansion": "^2.0.3",
+    "brace-expansion": "^2.1.2",
     "uuid": "^9.0.0"
   },
   "publishConfig": {