mirror of
https://github.com/XFox111/bonch-calendar.git
synced 2026-04-22 07:08:01 +03:00
dependabot[bot]
14f1b4e7b5
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
89 lines
1.8 KiB
YAML
89 lines
1.8 KiB
YAML
name: "Audit pipeline"
|
|
|
|
on:
|
|
push:
|
|
branches: [ "main" ]
|
|
paths-ignore:
|
|
- '.devcontainer/*'
|
|
- '.github/*'
|
|
- '!.github/workflows/audit.yml'
|
|
- '.vscode/*'
|
|
- '**.md'
|
|
- 'LICENSE'
|
|
- 'assets/*'
|
|
pull_request:
|
|
branches: [ "main" ]
|
|
paths-ignore:
|
|
- '.devcontainer/*'
|
|
- '.github/*'
|
|
- '!.github/workflows/audit.yml'
|
|
- '.vscode/*'
|
|
- '**.md'
|
|
- 'LICENSE'
|
|
- 'assets/*'
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
packages: write
|
|
|
|
jobs:
|
|
api:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
|
|
- uses: docker/build-push-action@v6
|
|
with:
|
|
context: ./api
|
|
tags: ${{ github.repository }}-api:ci
|
|
|
|
- run: docker save ${{ github.repository }}:ci | gzip > api_image.tar.gz
|
|
|
|
- uses: actions/upload-artifact@v5
|
|
with:
|
|
name: api-image
|
|
path: api_image.tar.gz
|
|
|
|
app:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
|
|
- uses: docker/build-push-action@v6
|
|
with:
|
|
context: ./app
|
|
tags: ${{ github.repository }}-app:ci
|
|
|
|
- run: docker save ${{ github.repository }}:ci | gzip > app_image.tar.gz
|
|
|
|
- uses: actions/upload-artifact@v5
|
|
with:
|
|
name: app-image
|
|
path: app_image.tar.gz
|
|
|
|
app_audit:
|
|
runs-on: ubuntu-latest
|
|
container: node:latest
|
|
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
|
|
- run: npm install
|
|
working-directory: ./app
|
|
|
|
- run: npm run lint
|
|
working-directory: ./app
|
|
|
|
- run: npm audit --audit-level=moderate
|
|
working-directory: ./app
|
|
|
|
- run: npm audit --audit-level=moderate --json > audit_report.json
|
|
working-directory: ./app
|
|
|
|
- uses: actions/upload-artifact@v5
|
|
with:
|
|
name: app-audit-report
|
|
path: ./app/audit_report.json
|