-
Notifications
You must be signed in to change notification settings - Fork 0
112 lines (112 loc) · 3.35 KB
/
main.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
name: Dev Pipeline
on:
push:
branches:
- main
- fix/article
tags:
- v*
jobs:
static-scan:
runs-on: ubuntu-latest
env:
JSON_OUTPUT: snyk-static-scan.json
steps:
- uses: actions/checkout@master
- uses: snyk/actions/setup@master
- uses: actions/setup-go@v1
- name: Run Snyk to check for vulnerabilities
continue-on-error: true
run: |
snyk code test
snyk-to-html -i $JSON_OUTPUT -o snyk.html
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
- name: Archive snyk results
uses: actions/upload-artifact@v3
with:
name: snyk-report
path: output/scan/snyk.html
retention-days: 5
dependency-scan:
runs-on: ubuntu-latest
env:
JSON_OUTPUT: snyk-dependency-scan.json
steps:
- uses: actions/checkout@master
- uses: snyk/actions/setup@master
- uses: actions/setup-go@v1
- name: Run Snyk to check for vulnerabilities
continue-on-error: true
run: |
snyk test
snyk-to-html -i $JSON_OUTPUT -o snyk.html
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
- name: Archive snyk results
uses: actions/upload-artifact@v3
with:
name: snyk-report
path: output/scan/snyk.html
retention-days: 5
lint:
needs: [static-scan, dependency-scan]
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- run: npm i --legacy-peer-deps
- name: lint
continue-on-error: true
run: npm run lint
# build:
# needs: [static-scan, dependency-scan, lint]
# runs-on: ubuntu-latest
# steps:
# - name: Checkout Repository
# uses: actions/checkout@v2
# - name: Set up Node.js
# uses: actions/setup-node@v2
# with:
# node-version: '20'
# - name: Install Dependencies
# run: npm install --legacy-peer-deps
# - name: Deploy to Heroku
# uses: akhileshns/[email protected]
# with:
# heroku_api_key: ${{ secrets.HEROKU_API_KEY }}
# heroku_app_name: hoseacodes-dev
# heroku_email: "[email protected]"
release:
# needs: [build]
name: Release pushed tag
runs-on: ubuntu-22.04
steps:
- name: Checkout
uses: actions/checkout@v3
with:
fetch-depth: 0 # required for github-action-get-previous-tag
- name: Get previous tag
id: previoustag
uses: 'WyriHaximus/github-action-get-previous-tag@v1'
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Get next minor version
id: semver
uses: 'WyriHaximus/github-action-next-semvers@v1'
with:
version: ${{ steps.previoustag.outputs.tag }}
- name: Create Tag
uses: rickstaa/[email protected]
with:
tag: v${{ steps.semver.outputs.patch }}-${{ github.ref_name }}
- name: Create release
id: create_release_id
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
tag: Release v${{ steps.semver.outputs.patch }}-${{ github.ref_name }}
run: |
gh release create "$tag" \
--repo="$GITHUB_REPOSITORY" \
--title="${GITHUB_REPOSITORY#*/} ${tag#v}" \
--generate-notes \
--draft