1
0
mirror of https://github.com/XFox111/bonch-calendar.git synced 2026-04-22 07:08:01 +03:00
Files
bonch-calendar/.github/workflows/audit.yml
T
dependabot[bot] c0e6ced376 build(deps): Bump actions/upload-artifact from 5 to 6 in the all group
Bumps the all group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/upload-artifact` from 5 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-03 20:11:32 +03:00

89 lines
1.8 KiB
YAML

name: "Audit pipeline"
on:
push:
branches: [ "main" ]
paths-ignore:
- '.devcontainer/*'
- '.github/*'
- '!.github/workflows/audit.yml'
- '.vscode/*'
- '**.md'
- 'LICENSE'
- 'assets/*'
pull_request:
branches: [ "main" ]
paths-ignore:
- '.devcontainer/*'
- '.github/*'
- '!.github/workflows/audit.yml'
- '.vscode/*'
- '**.md'
- 'LICENSE'
- 'assets/*'
workflow_dispatch:
permissions:
packages: write
jobs:
api:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: docker/build-push-action@v6
with:
context: ./api
tags: ${{ github.repository }}-api:ci
- run: docker save ${{ github.repository }}:ci | gzip > api_image.tar.gz
- uses: actions/upload-artifact@v6
with:
name: api-image
path: api_image.tar.gz
app:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: docker/build-push-action@v6
with:
context: ./app
tags: ${{ github.repository }}-app:ci
- run: docker save ${{ github.repository }}:ci | gzip > app_image.tar.gz
- uses: actions/upload-artifact@v6
with:
name: app-image
path: app_image.tar.gz
app_audit:
runs-on: ubuntu-latest
container: node:latest
steps:
- uses: actions/checkout@v6
- run: npm install
working-directory: ./app
- run: npm run lint
working-directory: ./app
- run: npm audit --audit-level=moderate
working-directory: ./app
- run: npm audit --audit-level=moderate --json > audit_report.json
working-directory: ./app
- uses: actions/upload-artifact@v6
with:
name: app-audit-report
path: ./app/audit_report.json