grafana-image-renderer.yaml

package:
  name: grafana-image-renderer
  version: "3.12.5"
  epoch: 0
  description: A Grafana backend plugin that handles rendering of panels & dashboards to PNGs using headless browser (Chromium/Chrome)
  copyright:
    - license: Apache-2.0
  target-architecture:
    - x86_64
  dependencies:
    runtime:
      - busybox
      - chromium
      - dumb-init
      - nodejs

environment:
  contents:
    packages:
      - build-base
      - busybox
      - ca-certificates-bundle
      - nodejs-20
      - scanelf
      - ttf-dejavu
      - yarn

pipeline:
  - uses: git-checkout
    with:
      repository: https://github.com/grafana/grafana-image-renderer
      tag: v${{package.version}}
      expected-commit: 8d69c499d8ab9e766ba1455eb6c1aa0b77e177d9

  - uses: patch
    with:
      patches: GHSA-rhx6-c78j-4q9w.patch

  - runs: |
      # Bump CVE-2024-21538
      yarn add cross-spawn@^7.0.5
      yarn upgrade
      yarn build
      yarn install --production

      # Node module installs multi-arch libraries, this deletes them
      scanelf -R -n . | awk '/aarch64/ {print $NF}' | xargs rm -rf

      mkdir -p ${{targets.destdir}}/usr/src/app/

      cp -r ./proto ${{targets.destdir}}/usr/src/app/
      cp -r ./build ${{targets.destdir}}/usr/src/app/
      cp -r ./node_modules ${{targets.destdir}}/usr/src/app/
      cp ./default.json ${{targets.destdir}}/usr/src/app/config.json
      cp ./plugin.json ${{targets.destdir}}/usr/src/app/

update:
  enabled: true
  github:
    identifier: grafana/grafana-image-renderer
    strip-prefix: v

test:
  pipeline:
    - name: "start app"
      working-directory: /usr/src/app
      uses: test/daemon-check-output
      with:
        start: "dumb-init -- node build/app.js server --config=config.json"
        timeout: 5
        expected_output: |
          {"level":"info","message":"HTTP Server started, listening at http://localhost:8081"}