Add required .github/workflows/security-code-scanner.yml file

Author: karreiro

.github/workflows/cla.yml

@@ -0,0 +1,19 @@
+on:
+  # allow manual triggering of the workflow
+  workflow_dispatch:
+  # Required for Repository Ruleset workflows
+  push:
+
+# Add this permissions block
+permissions:
+  actions: read
+  pull-requests: read
+  security-events: write
+  id-token: write
+  contents: read
+
+jobs:
+  Security-Code-Scanner:
+    uses: shopify-playground/github-actions/.github/workflows/security-code-scanner-workflow.yml@main
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/security-code-scanner.yml

@@ -7,7 +7,13 @@
   "scripts": {
     "start": "node --experimental-strip-types src/index.ts",
     "dev": "node --experimental-strip-types --watch src/index.ts",
-    "build": "echo noop"
+    "build": "echo noop",
+    "build:ts": "echo noop",
+    "build:ci": "echo noop",
+    "postbuild:ts": "echo noop",
+    "generate-factory-configs": "echo noop",
+    "type-check": "echo noop",
+    "test": "echo noop"
   },
   "keywords": [
     "mcp",
@@ -29,6 +35,6 @@
     "@types/node": "^20.0.0"
   },
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=18.20.8"
   }
 }

packages/theme-component-generator/package.json

@@ -1,11 +1,11 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 
-import { defineComponentGenerator } from "./components.ts";
+import { defineComponentGenerator } from './components.ts';
 
 const server = new McpServer({
-  name: "theme-component-generator",
-  version: "1.0.0",
+  name: 'theme-component-generator',
+  version: '1.0.0',
 });
 
 defineComponentGenerator(server);

packages/theme-component-generator/src/index.ts

@@ -168,15 +168,19 @@ async function createMCPConfig(configPath: string) {
   }
 
   /*
-  * The path ONLY works on local environments.
-  * To be able to reference the MCP in production, we need to update the path to be a reference to a published
-  * NPM package.
-  */
+   * The path ONLY works on local environments.
+   * To be able to reference the MCP in production, we need to update the path to be a reference to a published
+   * NPM package.
+   */
   const mcpConfig = {
-    [ detectEditor() === 'vscode' ? 'servers': 'mcpServers' ]: {
+    [detectEditor() === 'vscode' ? 'servers' : 'mcpServers']: {
       themeComponentGenerator: {
         command: 'node',
-        args: ["--experimental-strip-types", __dirname.match(/^.*?theme-tools\/packages/)?.[0] + "/theme-component-generator/src/index.ts"],
+        args: [
+          '--experimental-strip-types',
+          __dirname.match(/^.*?theme-tools\/packages/)?.[0] +
+            '/theme-component-generator/src/index.ts',
+        ],
         env: {},
       },
     },
@@ -193,13 +197,9 @@ function detectEditor(): string | undefined {
     return 'cursor';
   }
 
-  if (
-    appName.includes('vscode') ||
-    appName.includes('visual studio code')
-  ) {
+  if (appName.includes('vscode') || appName.includes('visual studio code')) {
     return 'vscode';
   }
 
   return;
 }
-