other small edits like gitignore and tsconfig

.gitignore

@@ -0,0 +1,25 @@
+# Node.js
+node_modules/
+dist/
+npm-debug.log
+yarn-error.log
+pnpm-debug.log
+
+# IDEs
+.idea/
+.vscode/
+*.swp
+*.swo
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# Reports and temporary files
+reports/
+*.sarif
+
+# Environment variables
+.env
+.env.local
+.env.*.local

helm/templates/infisical-secret.yaml

@@ -1,4 +1,4 @@
-{{- if .Values.pipeline.enabled }}
+{{- if and .Values.pipeline.enabled .Values.infisical.enabled }}
 apiVersion: infisical.com/v1alpha1
 kind: InfisicalSecret
 metadata:

tools/package.json

@@ -1,17 +1,15 @@
 {
   "name": "tools",
   "version": "1.0.0",
-  "description": "",
-  "main": "index.js",
+  "description": "Custom pipeline utilities for agentguard-ci",
   "type": "module",
   "scripts": {
-    "test": "vitest run",
+    "test": "vitest run src",
     "build": "tsc"
   },
   "keywords": [],
   "author": "",
   "license": "ISC",
-  "type": "commonjs",
   "devDependencies": {
     "@types/node": "^25.6.0",
     "tsx": "^4.21.0",

tools/tsconfig.json

@@ -8,7 +8,9 @@
     "strict": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true
+    "forceConsistentCasingInFileNames": true,
+    "types": ["node", "vitest/globals"],
+    "lib": ["ES2022", "DOM"]
   },
-  "include": ["src/**/*"]
+  "include": ["src/**/*.ts"]
 }