Merge pull request #3 from eduardocerqueira/dev #5
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI PR Check | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - dev | |
| pull_request: | |
| branches: | |
| - main | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v3 | |
| # setup node env | |
| - name: Set up Node.js | |
| uses: actions/setup-node@v2 | |
| with: | |
| node-version: '20' | |
| - name: Install dependencies | |
| run: npm install | |
| # run tests | |
| - name: Run tests | |
| run: npm test | |
| security-scan: | |
| needs: build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v3 | |
| # setup node env | |
| - name: Set up Node.js | |
| uses: actions/setup-node@v2 | |
| with: | |
| node-version: '20' | |
| - name: Install dependencies | |
| run: npm install | |
| - name: Run security audit | |
| run: npm audit --production --json > audit.json || true | |
| - name: report code vulnerabilities | |
| run: | | |
| if [ -s audit.json ]; then | |
| echo "Vulnerabilities found:" | |
| cat audit.json | |
| fi | |
| build-container: | |
| needs: [build, security-scan] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| # Step 3: Log in to Docker Hub (Optional) | |
| # Uncomment this section if you're pushing the image to Docker Hub. | |
| # Replace DOCKER_USERNAME and DOCKER_PASSWORD with your Docker credentials as GitHub secrets. | |
| # - name: Log in to Docker Hub | |
| # uses: docker/login-action@v3 | |
| # with: | |
| # username: ${{ secrets.DOCKER_USERNAME }} | |
| # password: ${{ secrets.DOCKER_PASSWORD }} | |
| # Step 4: Build the Docker image | |
| - name: Build Docker image | |
| run: | | |
| docker build -t node-login-app . | |
| # Step 5: (Optional) Push the Docker image to Docker Hub | |
| # Uncomment if you want to push the image to Docker Hub | |
| # - name: Push Docker image to Docker Hub | |
| # run: | | |
| # docker tag node-login-app:latest your-docker-username/node-login-app:latest | |
| # docker push your-docker-username/node-login-app:latest |