Refactor tools API to Fastify TypeScript adapter

.github/workflows/deploy-prod.yml

@@ -31,15 +31,15 @@ jobs:
 
       - name: Genereer app token (Release proces app)
         id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           app-id: ${{ secrets.RELEASE_PROCES_APP_ID }}
           private-key: ${{ secrets.RELEASE_PROCES_APP_PRIVATE_KEY }}
           owner: ${{ steps.infra-repo.outputs.owner }}
           repositories: ${{ steps.infra-repo.outputs.repo }}
 
       - name: Checkout don-infra
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           repository: ${{ env.INFRA_REPO }}
           token: ${{ steps.app-token.outputs.token }}
@@ -54,8 +54,8 @@ jobs:
       - name: Install yq
         run: |
           set -e
-          sudo wget -O /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.44.3/yq_linux_amd64
-          echo "a2c097180dd884a8d50c956ee16a9cec070f30a7947cf4ebf87d5f36213e9ed7  /usr/local/bin/yq" | sha256sum -c
+          sudo wget -O /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_amd64
+          echo "d56bf5c6819e8e696340c312bd70f849dc1678a7cda9c2ad63eebd906371d56b  /usr/local/bin/yq" | sha256sum -c
           sudo chmod +x /usr/local/bin/yq
 
       - name: Update image tag in prod overlay
@@ -91,4 +91,4 @@ jobs:
           **Branch:** \`${{ github.ref_name }}\`
           **Commit:** ${{ github.server_url }}/${{ github.repository }}/commit/${{ github.sha }}
 
-          Merge deze PR om de nieuwe versie naar productie te deployen."
+          Merge deze PR om de nieuwe versie naar productie te deployen."

.github/workflows/deploy-test.yml

@@ -48,20 +48,20 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
 
       - name: Login to container registry
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push image
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .
           push: true
@@ -88,24 +88,24 @@ jobs:
 
       - name: Genereer app token (Release proces app)
         id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           app-id: ${{ secrets.RELEASE_PROCES_APP_ID }}
           private-key: ${{ secrets.RELEASE_PROCES_APP_PRIVATE_KEY }}
           owner: ${{ steps.infra-repo.outputs.owner }}
           repositories: ${{ steps.infra-repo.outputs.repo }}
 
       - name: Checkout don-infra
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           repository: ${{ env.INFRA_REPO }}
           token: ${{ steps.app-token.outputs.token }}
 
       - name: Install yq
         run: |
           set -e
-          sudo wget -O /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.44.3/yq_linux_amd64
-          echo "a2c097180dd884a8d50c956ee16a9cec070f30a7947cf4ebf87d5f36213e9ed7  /usr/local/bin/yq" | sha256sum -c
+          sudo wget -O /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_amd64
+          echo "d56bf5c6819e8e696340c312bd70f849dc1678a7cda9c2ad63eebd906371d56b  /usr/local/bin/yq" | sha256sum -c
           sudo chmod +x /usr/local/bin/yq
 
       - name: Update image tag in test overlay
@@ -125,4 +125,4 @@ jobs:
 
           Branch: ${{ github.ref_name }}
           Commit: ${{ github.server_url }}/${{ github.repository }}/commit/${{ github.sha }}"
-          git push
+          git push

.github/workflows/json-ci.yml

@@ -12,11 +12,11 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
       - name: Run Super-Linter
-        uses: super-linter/super-linter@v8.6.0
+        uses: super-linter/super-linter@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           VALIDATE_ALL_CODEBASE: true

.github/workflows/node-ci.yml

@@ -9,12 +9,12 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: 20
+          node-version: 22
           cache: npm
 
       - name: Install dependencies
@@ -30,17 +30,17 @@ jobs:
     permissions:
       packages: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build & Push Docker image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .
           push: true

Dockerfile

@@ -1,14 +1,24 @@
-FROM node:lts-alpine AS runtime
-
+FROM node:22-alpine AS build
 WORKDIR /app
-
-# Install dependencies
 COPY package.json package-lock.json ./
 RUN npm ci
+COPY tsconfig.json ./
+COPY api ./api
+COPY controllers ./controllers
+COPY decorators ./decorators
+COPY models ./models
+COPY implementation ./implementation
+COPY app ./app
+RUN npm run build
 
-# Copy source
-COPY . .
+FROM node:22-alpine AS runtime
+WORKDIR /app
+ENV NODE_ENV=production
+COPY package.json package-lock.json ./
+RUN npm ci --omit=dev
+COPY --from=build /app/dist ./dist
+COPY api ./api
 
-EXPOSE 8080
+EXPOSE 1338
 
-CMD ["node", "index.js"]
+CMD ["node", "dist/app/index.js"]