chore: Add OpenSSF scorecard

.github/workflows/pa11y.yml

@@ -15,6 +15,9 @@ env:
   FORCE_COLOR: 2
   NODE: 22
 
+permissions:
+  contents: read
+
 jobs:
   pa11y:
     runs-on: ubuntu-latest

.github/workflows/percy.yml

@@ -14,6 +14,9 @@ env:
   FORCE_COLOR: 2
   NODE: 22
 
+permissions:
+  contents: read
+
 jobs:
   percy:
     runs-on: ubuntu-latest

.github/workflows/update-pr-approved.yml

@@ -4,6 +4,9 @@ on:
     types:
       - submitted
 
+permissions:
+  contents: read
+
 jobs:
   move_card_to_next_review:
     if: github.event.review.state == 'approved'

.github/workflows/update-pr-desc-links.yml

@@ -4,6 +4,9 @@ on:
     types:
       - opened
 
+permissions:
+  contents: read
+
 jobs:
   track_pr:
     runs-on: ubuntu-latest

.github/workflows/update-pr-design-a11y-approved.yml

@@ -5,6 +5,9 @@ on:
       - labeled
       - unlabeled
 
+permissions:
+  contents: read
+
 jobs:
   design_or_a11y_approved:
     if: (contains(github.event.*.labels.*.name, 'passed a11y review') || contains(github.event.*.labels.*.name, 'passed design review')) && !(contains(github.event.*.labels.*.name, 'ready for a11y review') || contains(github.event.*.labels.*.name, 'ready for design review'))

.github/workflows/update-pr-ready-review.yml

@@ -6,6 +6,9 @@ on:
      - opened
      - reopened
 
+permissions:
+  contents: read
+
 jobs:
   move_card_to_need_dev_review:
     if: github.event.pull_request.draft == false

.github/workflows/update-pr-review-in-progress.yml

@@ -4,6 +4,9 @@ on:
     types:
       - submitted
 
+permissions:
+  contents: read
+
 jobs:
   move_card_to_dev_review_in_progress:
     if: ${{ github.event.pull_request.draft == false && github.event.review.state == 'changes_requested' && github.actor != vars.LEAD_DEV_GH_USERNAME && github.actor != vars.A11Y_REVIEWER_GH_USERNAME }}

README.md

@@ -54,6 +54,7 @@ Read the [Getting started page](https://boosted.orange.com/docs/getting-started/
 [![JS gzip size](https://img.badgesize.io/Orange-OpenSource/Orange-Boosted-Bootstrap/main/dist/js/boosted.min.js?compression=gzip&label=JS%20gzip%20size)](https://github.com/Orange-OpenSource/Orange-Boosted-Bootstrap/blob/main/dist/js/boosted.min.js)
 [![JS Brotli size](https://img.badgesize.io/Orange-OpenSource/Orange-Boosted-Bootstrap/main/dist/js/boosted.min.js?compression=brotli&label=JS%20Brotli%20size)](https://github.com/Orange-OpenSource/Orange-Boosted-Bootstrap/blob/main/dist/js/boosted.min.js)
 [![JSDelivr](https://data.jsdelivr.com/v1/package/npm/boosted/badge)](https://www.jsdelivr.com/package/npm/boosted)
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/Orange-OpenSource/Orange-Boosted-Bootstrap/badge)](https://scorecard.dev/viewer/?uri=github.com/Orange-OpenSource/Orange-Boosted-Bootstrap)
 
 ## What’s included
 

site/src/libs/examples.ts

@@ -65,7 +65,7 @@ function sanitizeAssetPath(assetPath: string) {
     throw new Error(`Failed to get example asset path from path: '${assetPath}'.`)
   }
 
-  return matches[1].replace('\\', '/')
+  return matches[1].replaceAll('\\', '/')
 }
 
 function isAliasedAstroInstance(page: AstroInstance): page is AliasedAstroInstance {

stories/create-stories-from-doc.js

@@ -87,7 +87,7 @@
         mdxContent += `<Canvas>\n<Story of={${file[0]}_Stories.${file[0]}_${index}}/>\n</Canvas>\n\n`
 
         // Automatically remove HTML comments that would break the story
-        example[0] = `<div class="${Object.values(example[1]).join(' ')} m-0 border-0">${example[0].replace(/<!--[\S\s]*?-->/gm, '').replaceAll('`', '\\`').replaceAll('${', '\\${')}</div>`
+        example[0] = `<div class="${Object.values(example[1]).join(' ')} m-0 border-0">${example[0].replaceAll(/<!--.*?-->/gm, '').replaceAll('`', '\\`').replaceAll('${', '\\${')}</div>`
 
         // Insert some specific JavaScript
         example[0] += '\n<script type="text/javascript">\n  /* global boosted: false */\n  document.querySelectorAll(\'[href]\').forEach(link => {link.addEventListener(\'click\', event => {event.preventDefault()})})\n</script>' // Remove links behavior