Bifravst CI

Sets up the permissions in our AWS CI account for the repositories in this GitHub organization that are supposed to have access so they are be able to use it for CI runs.

The allowed list of repositories is managed via the repos.txt file.

Caution

Do not run this against the production account, but against the CI account.

npx cdk deploy

Node & NPM

This project requires Node.js >=24.18.1 <25 and npm >=12.0.2 <13 (enforced via check-node-version on npm install and npm ci).

The check is skipped during npm publish and npm pack, because semantic-release bundles its own npm (@semantic-release/npm depends on npm@^11.6.2) and runs the publish with that version rather than the one installed in CI.

TypeScript 6 and 7

This repo runs TypeScript 6 and 7 side by side, so that eslint works.