32 lines
1.3 KiB
YAML
32 lines
1.3 KiB
YAML
name: ci-workflow
|
|
|
|
on: [push]
|
|
jobs:
|
|
ci_podman:
|
|
runs-on: docker
|
|
|
|
container:
|
|
image: forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/pipeline-container/complete_podman:v0.0.1
|
|
|
|
steps:
|
|
|
|
- name: Clone Repository
|
|
uses: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/checkout@main
|
|
|
|
- name: Lint the Repository
|
|
run: |
|
|
golangci-lint run ./... --out-format=json --timeout 5m --issues-exit-code 1
|
|
|
|
- name: Build Credentials File
|
|
run: |
|
|
echo "${{ secrets.REGISTRY_PASSWORD }}" | sudo podman login forgejo.edf-bootstrap.cx.fg1.ffm.osc.live -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
|
|
|
|
- name: Build Docker Container
|
|
run: |
|
|
sudo podman build -t fibonacci_go:latest -f Dockerfile .
|
|
sudo podman push fibonacci_go:latest forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
|
|
|
|
- name: Vulnerability Scanning
|
|
run: |
|
|
trivy image --scanners license,vuln,secret forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
|
|
trivy image --image-config-scanners secret,misconfig forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
|