Woo plugin

.ddev/.gitignore

@@ -9,11 +9,11 @@
 /.homeadditions
 /.importdb*
 /.sshimageBuild
-/.venv
 /.webimageBuild
 /apache/apache-site.conf
 /commands/.gitattributes
 /config.local.y*ml
+/config.*.local.y*ml
 /db_snapshots
 /mutagen/mutagen.yml
 /mutagen/.start-synced
@@ -25,7 +25,6 @@
 /providers/platform.yaml
 /providers/upsun.yaml
 /sequelpro.spf
-/settings/settings.ddev.py
 /traefik/config/gdsbedrock.yaml
 /traefik/certs/gdsbedrock.crt
 /traefik/certs/gdsbedrock.key

.editorconfig

@@ -1,15 +1,31 @@
 root = true
 
 [*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
 indent_style = space
 indent_size = 2
-end_of_line = lf
-charset = utf-8
 trim_trailing_whitespace = true
-insert_final_newline = true
+max_line_length = 80
+
+[*.md]
+trim_trailing_whitespace = false
 
 [*.php]
 indent_size = 4
 
-[*.md]
-trim_trailing_whitespace = false
+[*.blade.php]
+indent_size = 2
+
+[resources/views/**.php]
+indent_size = 2
+
+[index.php]
+indent_size = 2
+
+[resources/blocks/**.php]
+indent_size = 4
+
+[resources/blocks/**.blade.php]
+indent_size = 2

.github/workflows/deploy_production.yml

@@ -19,6 +19,3 @@ jobs:
     uses: ./.github/workflows/e2e.yml
     with:
       url: 'https://gdsbedrock.kinsta.cloud'
-  lighthouse:
-    needs: deploy
-    uses: ./.github/workflows/lighthouse.yml

.github/workflows/test.yml

@@ -25,8 +25,6 @@ jobs:
 
       - name: Install WordPress
         uses: ./.github/actions/install-wordpress
-        with:
-          multisite: 'false'
 
       - name: Optimize acorn
         run: ./vendor/bin/wp acorn optimize

.github/workflows/vulnerability-scan.yml

@@ -1,12 +1,17 @@
 name: Vulnerability Scan
 on:
   schedule:
-    - cron: '5 4 * * *'
+    - cron: "5 4 * * *"
   workflow_dispatch:
 
+env:
+  NPM_FONTAWESOME_AUTH_TOKEN: ${{ secrets.NPM_FONTAWESOME_AUTH_TOKEN }}
+  PACKAGIST_GITHUB_TOKEN: ${{ secrets.PACKAGIST_GITHUB_TOKEN }}
+  MICROSOFT_TEAMS_FAUCET_WEBHOOK: ${{ secrets.MICROSOFT_TEAMS_FAUCET_WEBHOOK }}
+
 jobs:
-  scan:
-    name: Vulnerability Scan
+  build_deploy:
+    name: Scan
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
@@ -15,8 +20,8 @@ jobs:
       - name: Setup project
         uses: ./.github/actions/setup
         with:
-          npm_fontawesome_auth_token: ${{ secrets.NPM_FONTAWESOME_AUTH_TOKEN }}
-          packagist_github_token: ${{ secrets.PACKAGIST_GITHUB_TOKEN }}
+          npm_fontawesome_auth_token: ${{ env.NPM_FONTAWESOME_AUTH_TOKEN }}
+          packagist_github_token: ${{ env.PACKAGIST_GITHUB_TOKEN }}
 
       - name: Install development packages and build assets
         run: composer install:development
@@ -25,42 +30,65 @@ jobs:
         uses: ./.github/actions/install-wordpress
 
       - name: Run vulnerability scan
-        run: ./vendor/bin/wp vuln status --nagios
+        id: scan
+        run: |
+          ./vendor/bin/wp vuln status | grep '/10' \
+            | grep -v 'Not fixed' \
+            | tee /tmp/vulnerabilities.txt
 
-      - name: Show vulnerabilties
-        if: failure()
-        run: ./vendor/bin/wp vuln status
+          if [ -s /tmp/vulnerabilities.txt ]; then
+            formatted_plugins=$(awk '{print $1 " (" $NF ")" }' /tmp/vulnerabilities.txt | paste -sd ", " - | sed 's/,/, /g')
+            echo "formatted_plugins=$formatted_plugins" >> $GITHUB_OUTPUT
+            exit 1
+          else
+            echo "No vulnerabilities found"
+            exit 0
+          fi
 
       - name: Microsoft Teams Notification
-        uses: skitionek/notify-microsoft-teams@master
         if: failure()
-        with:
-          webhook_url: ${{ secrets.MICROSOFT_TEAMS_FAUCET_WEBHOOK }}
-          raw: >-
-            {
-              "@type": "MessageCard",
-              "@context": "http://schema.org/extensions",
-              "themeColor": "0076D7",
-              "summary": "Vulnerability scan failed: ${{ github.event.repository.name }}",
-              "sections": [{
-                "activityTitle": "Vulnerability scan failed: ${{ github.event.repository.name }}",
-                "activitySubtitle": "Potential vulnerable plugin version detected by Wordfence on ${{ github.event.repository.name }} site",
-                "facts": [],
-                "markdown": true
-              }],
-              "potentialAction": [{
-                "@type": "OpenUri",
-                "name": "Repository",
-                "targets": [{
-                  "os": "default",
-                  "uri": "${{ github.server_url }}/${{ github.repository }}"
-                }]
-              }, {
-                "@type": "OpenUri",
-                "name": "Job details",
-                "targets": [{
-                  "os": "default",
-                  "uri": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
-                }]
-              }]
-            }
+        run: |
+          curl -H 'Content-Type: application/json' -d '{
+            "type": "message",
+            "attachments": [
+              {
+                "contentType": "application/vnd.microsoft.card.adaptive",
+                "content": {
+                  "type": "AdaptiveCard",
+                  "$schema": "https://adaptivecards.io/schemas/adaptive-card.json",
+                  "version": "1.5",
+                  "body": [
+                    {
+                      "type": "TextBlock",
+                      "size": "Large",
+                      "weight": "Bolder",
+                      "text": "⚠️ Vulnerability scan failed: ${{ github.event.repository.name }}",
+                      "wrap": true
+                    },
+                    {
+                      "type": "TextBlock",
+                      "size": "Small",
+                      "text": "${{ steps.scan.outputs.formatted_plugins }}",
+                      "wrap": true
+                    },
+                    {
+                      "type": "ActionSet",
+                      "actions": [
+                        {
+                          "type": "Action.OpenUrl",
+                          "title": "Repository",
+                          "url": "${{ github.server_url }}/${{ github.repository }}"
+                        },
+                        {
+                          "type": "Action.OpenUrl",
+                          "title": "Job details",
+                          "url": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+                        }
+                      ],
+                      "horizontalAlignment": "left"
+                    }
+                  ]
+                }
+              }
+            ]
+          }' "${{ env.MICROSOFT_TEAMS_FAUCET_WEBHOOK }}"

.gitignore

@@ -5,6 +5,7 @@
 
 # Application
 web/app/plugins/*
+!web/app/plugins/genero-woocommerce
 !web/app/plugins/.gitkeep
 web/app/mu-plugins/*/
 web/app/languages/*
@@ -35,6 +36,7 @@ auth.json
 # Node Package Manager
 node_modules
 npm-debug.log
+yarn-error.log
 
 # Vagrant
 .vagrant
@@ -60,3 +62,6 @@ wp-cli.local.yml
 .phpunit.result.cache
 screenshot.jpg
 test-results
+
+# Theme
+web/app/themes/*/public

.prettierignore

@@ -0,0 +1,8 @@
+web/app/acf-json
+web/app/cache
+web/app/languages
+web/app/mu-plugins/*/*
+web/app/plugins
+web/app/uploads
+web/wp
+**/vendor