workflows

CI/CD

The CI/CD for this project uses reusable Github Actions workflows.

🧪 CI

Per app workflows

Each app should have:

• ci-[app_name]: must be created; should run linting and testing
• ci-[app_name]-vulnerability-scans: calls vulnerability-scans
  • Based on ci-app-vulnerability-scans
• ci-[app_name]-pr-environment-checks.yml: calls pr-environment-checks.yml to create or update a pull request environment (see pull request environments)
  • Based on ci-app-pr-environment-checks.yml
• ci-[app_name]-pr-environment-destroy.yml: calls pr-environment-destroy.yml to destroy the pull request environment (see pull request environments)
  • Based on ci-app-pr-environment-destroy.yml

App-agnostic workflows

• ci-docs: runs markdown linting on all markdown files in the file
  • Configure in markdownlint-config.json
• ci-infra: run infrastructure CI checks

🚢 CD

Each app should have:

• cd-[app_name]: deploys an application
  • Based on cd-app

The CD workflow uses these reusable workflows:

• deploy: deploys an application
• database-migrations: runs database migrations for an application
• build-and-publish: builds a container image for an application and publishes it to an image repository

graph TD
  cd-app
  deploy
  database-migrations
  build-and-publish

  cd-app-->|calls|deploy-->|calls|database-migrations-->|calls|build-and-publish

Loading

⛑️ Helper workflows

• check-ci-cd-auth: verifes that the project's Github repo is able to connect to AWS