|
|
@ -3,14 +3,15 @@ name: Nightly Code Security Scan
|
|
|
|
on:
|
|
|
|
on:
|
|
|
|
schedule:
|
|
|
|
schedule:
|
|
|
|
- cron: '0 8 * * *'
|
|
|
|
- cron: '0 8 * * *'
|
|
|
|
|
|
|
|
pull_request:
|
|
|
|
workflow_dispatch:
|
|
|
|
workflow_dispatch:
|
|
|
|
|
|
|
|
|
|
|
|
jobs:
|
|
|
|
jobs:
|
|
|
|
client-dependencies:
|
|
|
|
client-dependencies:
|
|
|
|
name: Client dependency check
|
|
|
|
name: Client dependency check
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
if: >- # only run for develop branch
|
|
|
|
# if: >- # only run for develop branch
|
|
|
|
github.ref == 'refs/heads/develop'
|
|
|
|
# github.ref == 'refs/heads/develop'
|
|
|
|
outputs:
|
|
|
|
outputs:
|
|
|
|
js: ${{ steps.set-matrix.outputs.js_result }}
|
|
|
|
js: ${{ steps.set-matrix.outputs.js_result }}
|
|
|
|
steps:
|
|
|
|
steps:
|
|
|
@ -49,8 +50,8 @@ jobs:
|
|
|
|
server-dependencies:
|
|
|
|
server-dependencies:
|
|
|
|
name: Server dependency check
|
|
|
|
name: Server dependency check
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
if: >- # only run for develop branch
|
|
|
|
# if: >- # only run for develop branch
|
|
|
|
github.ref == 'refs/heads/develop'
|
|
|
|
# github.ref == 'refs/heads/develop'
|
|
|
|
outputs:
|
|
|
|
outputs:
|
|
|
|
go: ${{ steps.set-matrix.outputs.go_result }}
|
|
|
|
go: ${{ steps.set-matrix.outputs.go_result }}
|
|
|
|
steps:
|
|
|
|
steps:
|
|
|
@ -93,8 +94,8 @@ jobs:
|
|
|
|
image-vulnerability:
|
|
|
|
image-vulnerability:
|
|
|
|
name: Build docker image and Image vulnerability check
|
|
|
|
name: Build docker image and Image vulnerability check
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
if: >-
|
|
|
|
# if: >-
|
|
|
|
github.ref == 'refs/heads/develop'
|
|
|
|
# github.ref == 'refs/heads/develop'
|
|
|
|
outputs:
|
|
|
|
outputs:
|
|
|
|
image: ${{ steps.set-matrix.outputs.image_result }}
|
|
|
|
image: ${{ steps.set-matrix.outputs.image_result }}
|
|
|
|
steps:
|
|
|
|
steps:
|
|
|
@ -161,8 +162,8 @@ jobs:
|
|
|
|
name: Analyse scan result
|
|
|
|
name: Analyse scan result
|
|
|
|
needs: [client-dependencies, server-dependencies, image-vulnerability]
|
|
|
|
needs: [client-dependencies, server-dependencies, image-vulnerability]
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
if: >-
|
|
|
|
# if: >-
|
|
|
|
github.ref == 'refs/heads/develop'
|
|
|
|
# github.ref == 'refs/heads/develop'
|
|
|
|
strategy:
|
|
|
|
strategy:
|
|
|
|
matrix:
|
|
|
|
matrix:
|
|
|
|
js: ${{fromJson(needs.client-dependencies.outputs.js)}}
|
|
|
|
js: ${{fromJson(needs.client-dependencies.outputs.js)}}
|
|
|
|