diff --git a/tools/release/check.mjs b/tools/release/check.mjs index f05e956..16c860b 100644 --- a/tools/release/check.mjs +++ b/tools/release/check.mjs @@ -33,7 +33,7 @@ export async function runCheck() { step("build bailian-cli"); run("pnpm", ["--filter", "bailian-cli", "run", "build"]); - step("pack + scan (publint, attw, gitleaks)"); + step("pack + scan (publint, gitleaks)"); packAndScan({ log }); log("\nrelease check passed."); diff --git a/tools/release/lib/pack-scan.mjs b/tools/release/lib/pack-scan.mjs index f673d00..5825d7b 100644 --- a/tools/release/lib/pack-scan.mjs +++ b/tools/release/lib/pack-scan.mjs @@ -13,10 +13,6 @@ function extractTarball(tarball, tempDir, key) { return extractDir; } -/** - * pnpm pack each package, then run publint / attw / gitleaks on the tarball - * or the extracted directory. attw only runs on packages that declare types. - */ export function packAndScan({ log }) { const tempDir = mkdtempSync(join(tmpdir(), "bailian-release-")); try { @@ -29,11 +25,6 @@ export function packAndScan({ log }) { log(`publint ${pkg.name}`); run("npx", ["--yes", "publint", extractDir]); - if (json.types) { - log(`attw ${pkg.name}`); - run("npx", ["--yes", "@arethetypeswrong/cli", "--pack", extractDir]); - } - log(`gitleaks ${pkg.name}`); run("gitleaks", ["detect", "--source", extractDir, "--no-git", "--redact"]); }