File tree Expand file tree Collapse file tree 4 files changed +13
-15
lines changed
Expand file tree Collapse file tree 4 files changed +13
-15
lines changed Original file line number Diff line number Diff line change 66
77 lint-gradle-project :
88 runs-on : ubuntu-latest
9+ name : Lint
910 steps :
1011 - name : Checkout project source
1112 uses : actions/checkout@v4
2425
2526 build-and-tests-api :
2627 runs-on : ubuntu-latest
27-
28+ name : Build and test
2829 needs : lint-gradle-project
29-
3030 steps :
3131 - name : Checkout project source
3232 uses : actions/checkout@v4
5151
5252 build-docker :
5353 runs-on : ubuntu-latest
54+ name : Build Docker image and scan for vulnerabilities
5455 steps :
5556 - name : Set up Docker Buildx
5657 uses : docker/setup-buildx-action@v3
@@ -61,19 +62,16 @@ jobs:
6162 username : ${{ vars.DOCKER_USER }}
6263 password : ${{ secrets.DOCKER_SECRET }}
6364
64- - name : Build and push
65+ - name : Build
6566 uses : docker/build-push-action@v5
6667 with :
67- push : true
68+ push : flase
6869 tags : ${{ vars.DOCKER_IMAGE_NAME }}:latest
70+
71+ - name : Download Trivy
72+ run : curl https://raw.githubusercontent.com/aquasecurity/trivy/7735ec432a83d5446d13a593ab3b27dd02649ca1/contrib/markdown.tpl -o markdown.tpl
6973
70- cve-check :
71- runs-on : ubuntu-latest
72- needs : build-docker
73-
74- steps :
75- - run : curl https://raw.githubusercontent.com/aquasecurity/trivy/7735ec432a83d5446d13a593ab3b27dd02649ca1/contrib/markdown.tpl -o markdown.tpl
76- - name : Run Trivy vulnerability scanner
74+ - name : Run Trivy vulnerability scanner
7775 uses : aquasecurity/trivy-action@0.20.0
7876 with :
7977 image-ref : ${{ vars.DOCKER_IMAGE_NAME }}:latest
8482 ignore-unfixed : true
8583 vuln-type : ' os,library'
8684 severity : ' CRITICAL,HIGH'
85+
8786 - run : cat trivy.md >> $GITHUB_STEP_SUMMARY
8887 if : always()
Original file line number Diff line number Diff line change 77env :
88 REGISTRY : registry.razano.dev
99 HARBOR_PROJECT : ctcd
10- IMAGE_NAME : ctcd
10+ IMAGE_NAME : ctcd-app
1111
1212jobs :
1313 build-and-push-image :
Original file line number Diff line number Diff line change 1919 spec :
2020 containers :
2121 - name : ctcd
22- image : {{ .Values.ctcd.image.repository }}:{{ .Values.ctcd.image.tag }}
22+ image : {{ .Values.ctcd.image.repository }}:{{ .Chart.Version }}
2323 imagePullPolicy : {{ .Values.ctcd.image.pullPolicy }}
2424 env :
2525 - name : CITY_API_DB_URL
Original file line number Diff line number Diff line change 66 url : ct-cd.fr
77 replicas : 2
88 image :
9- repository : razano/ctcd
10- tag : latest
9+ repository : registry.razano.dev/ctcd/ctcd-app
1110 pullPolicy : Always
1211 app :
1312 port : 8080
You can’t perform that action at this time.
0 commit comments