chore: remove workflows for now
This commit is contained in:
voodev
@@ -1,20 +0,0 @@
|
||||
name: Label Awaiting Release
|
||||
|
||||
on:
|
||||
pull_request_target:
|
||||
types: [closed]
|
||||
|
||||
jobs:
|
||||
label:
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
issues: write
|
||||
pull-requests: write
|
||||
if: github.event.pull_request.merged == true
|
||||
steps:
|
||||
- name: Add awaiting release label
|
||||
uses: actions-ecosystem/action-add-labels@v1
|
||||
with:
|
||||
github_token: ${{ secrets.GITHUB_TOKEN }}
|
||||
labels: 'awaiting release'
|
||||
|
||||
@@ -1,23 +0,0 @@
|
||||
name: Backend system tests
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches:
|
||||
- main
|
||||
push:
|
||||
tags:
|
||||
- "v*"
|
||||
|
||||
jobs:
|
||||
system-tests:
|
||||
timeout-minutes: 15
|
||||
runs-on: ubuntu-latest
|
||||
container: node:22
|
||||
steps:
|
||||
- uses: actions/checkout@v3
|
||||
- name: Install Dependencies
|
||||
working-directory: ./backend
|
||||
run: npm install
|
||||
- name: Run Server and Test with Newman
|
||||
working-directory: ./backend
|
||||
run: npm run test:system
|
||||
@@ -1,59 +0,0 @@
|
||||
name: Build and Push Docker Image
|
||||
|
||||
on:
|
||||
release:
|
||||
types: [published]
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
packages: write
|
||||
|
||||
jobs:
|
||||
docker:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: checkout code
|
||||
uses: actions/checkout@v3
|
||||
|
||||
- name: Docker metadata
|
||||
id: meta
|
||||
uses: docker/metadata-action@v5
|
||||
with:
|
||||
images: |
|
||||
ghcr.io/${{ github.repository }}
|
||||
${{ github.repository }}
|
||||
tags: |
|
||||
type=semver,pattern={{version}},prefix=v
|
||||
type=semver,pattern={{major}}.{{minor}},prefix=v
|
||||
type=semver,pattern={{major}},prefix=v
|
||||
type=raw,value=latest,enable=${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'release' && !github.event.release.prerelease) }}
|
||||
type=raw,value=beta,enable=${{ github.event_name == 'release' && github.event.release.prerelease }}
|
||||
|
||||
- name: Login to Docker Hub
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
username: ${{ secrets.DOCKER_USERNAME }}
|
||||
password: ${{ secrets.DOCKER_PASSWORD }}
|
||||
|
||||
- name: Login to GitHub Container Registry
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ghcr.io
|
||||
username: ${{ github.repository_owner }}
|
||||
password: ${{ secrets.GITHUB_TOKEN }}
|
||||
|
||||
- name: Set up QEMU
|
||||
uses: docker/setup-qemu-action@v3
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v3
|
||||
|
||||
- name: Build and push
|
||||
uses: docker/build-push-action@v6
|
||||
with:
|
||||
platforms: linux/amd64,linux/arm64
|
||||
push: true
|
||||
tags: ${{ steps.meta.outputs.tags }}
|
||||
labels: ${{ steps.meta.outputs.labels }}
|
||||
no-cache: true
|
||||
@@ -1,76 +0,0 @@
|
||||
---
|
||||
name: Docker Security
|
||||
|
||||
"on":
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
pull_request:
|
||||
branches:
|
||||
- main
|
||||
schedule:
|
||||
- cron: "0 4 * * 0"
|
||||
workflow_dispatch:
|
||||
|
||||
concurrency:
|
||||
group: ${{ github.workflow }}-${{ github.ref }}
|
||||
cancel-in-progress: true
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
security-events: write
|
||||
|
||||
env:
|
||||
IMAGE_REF: pingvin-share-x:security-scan
|
||||
|
||||
jobs:
|
||||
security-scan:
|
||||
name: Security scan
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 30
|
||||
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v6
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v4
|
||||
|
||||
- name: Build Docker image
|
||||
uses: docker/build-push-action@v7
|
||||
with:
|
||||
context: .
|
||||
pull: true
|
||||
load: true
|
||||
tags: ${{ env.IMAGE_REF }}
|
||||
no-cache: true
|
||||
|
||||
- name: Trivy SARIF report
|
||||
if: github.event_name != 'pull_request'
|
||||
uses: aquasecurity/trivy-action@v0.36.0
|
||||
with:
|
||||
image-ref: ${{ env.IMAGE_REF }}
|
||||
format: sarif
|
||||
output: trivy-pingvin-share-x.sarif
|
||||
severity: CRITICAL,HIGH,MEDIUM
|
||||
scanners: vuln,secret
|
||||
ignore-unfixed: true
|
||||
exit-code: "0"
|
||||
limit-severities-for-sarif: true
|
||||
|
||||
- name: Upload Trivy results to GitHub Security
|
||||
if: github.event_name != 'pull_request'
|
||||
uses: github/codeql-action/upload-sarif@v4
|
||||
with:
|
||||
sarif_file: trivy-pingvin-share-x.sarif
|
||||
category: container-pingvin-share-x
|
||||
|
||||
- name: Trivy medium, high, and critical summary
|
||||
uses: aquasecurity/trivy-action@v0.36.0
|
||||
with:
|
||||
image-ref: ${{ env.IMAGE_REF }}
|
||||
format: table
|
||||
severity: CRITICAL,HIGH,MEDIUM
|
||||
scanners: vuln,secret
|
||||
ignore-unfixed: true
|
||||
exit-code: "0"
|
||||
@@ -1,48 +0,0 @@
|
||||
name: Mark as Released
|
||||
|
||||
on:
|
||||
release:
|
||||
types: [published]
|
||||
|
||||
jobs:
|
||||
update-labels:
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
issues: write
|
||||
pull-requests: write
|
||||
steps:
|
||||
- name: Swap PR labels
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
GH_REPO: ${{ github.repository }}
|
||||
IS_PRERELEASE: ${{ github.event.release.prerelease }}
|
||||
run: |
|
||||
if [ "$IS_PRERELEASE" = "true" ]; then
|
||||
echo "Processing pre-release..."
|
||||
FROM_LABEL="awaiting release"
|
||||
TO_LABEL="in beta"
|
||||
else
|
||||
echo "Processing regular release..."
|
||||
FROM_LABEL="in beta"
|
||||
TO_LABEL="released"
|
||||
fi
|
||||
|
||||
# 1. Find all merged PRs with the source label
|
||||
pr_numbers=$(gh pr list --state merged --label "$FROM_LABEL" --limit 1000 --json number --jq '.[].number')
|
||||
|
||||
if [ -z "$pr_numbers" ]; then
|
||||
echo "No PRs found with '$FROM_LABEL' label."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
# 2. Loop through each PR to swap the labels
|
||||
for pr in $pr_numbers; do
|
||||
echo "Updating labels for PR #$pr (moving from '$FROM_LABEL' to '$TO_LABEL')"
|
||||
|
||||
# Remove the old label
|
||||
gh pr edit $pr --remove-label "$FROM_LABEL"
|
||||
|
||||
# Add the new label
|
||||
gh pr edit $pr --add-label "$TO_LABEL"
|
||||
done
|
||||
|
||||
Reference in New Issue
Block a user