chore: fix again #39
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: app-pecha-frontend | |
| on: [ push, pull_request,workflow_dispatch ] | |
| jobs: | |
| gitleaks: | |
| name: Gitleaks Scan | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Run Gitleaks | |
| uses: dhsathiya/gitleaks-action@main | |
| with: | |
| config: .gitleaks.toml # Optional: Use a custom config file if available | |
| fail: true # Fail workflow if secrets are detected | |
| verbose: true # Enable detailed output | |
| - name: Upload Gitleaks Report (Optional) | |
| if: failure() | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: gitleaks-report | |
| path: gitleaks-report.json | |
| buildDockerImage: | |
| name: Build and Dockerize | |
| runs-on: ubuntu-latest | |
| needs: [ gitleaks ] | |
| if: success() | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: log in Docker Hub | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.PECHA_REPO }} | |
| - name: Set short git commit SHA | |
| id: vars | |
| run: | | |
| if [[ -n "${{ github.ref }}" && "${{ github.ref }}" =~ ^refs/tags/ ]]; then | |
| tagNumber=$(echo "${{ github.ref }}" | sed 's#refs/tags/##') | |
| echo "IMAGE_TAG=$tagNumber" >> $GITHUB_ENV | |
| else | |
| calculatedSha=$(git rev-parse --short ${{ github.sha }}) | |
| echo "IMAGE_TAG=${{ github.run_id }}-$calculatedSha" >> $GITHUB_ENV | |
| fi | |
| - name: Confirm git commit SHA output | |
| run: echo ${{ env.IMAGE_TAG }} | |
| - name: Build Docker image in Github container registry | |
| run: | | |
| lower_owner=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]') | |
| docker build -t ghcr.io/$lower_owner/pecha-frontend:${{ env.IMAGE_TAG }} . | |
| - name: Push Docker image to GHCR | |
| run: | | |
| lower_owner=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]') | |
| docker push ghcr.io/$lower_owner/pecha-frontend:${{ env.IMAGE_TAG }} | |
| - name: Trigger Render Deployment | |
| env: | |
| deploy_url: ${{ secrets.RENDER_DEPLOY_HOOK_URL }} | |
| run: | | |
| lower_owner=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]') | |
| image_url=ghcr.io/$lower_owner/pecha-frontend:pecha-frontend:12732320595-945a6f7 | |
| encoded_url=$(python -c "import urllib.parse; print(urllib.parse.quote('${image_url}'))") | |
| echo "Encoded URL: $encoded_url" | |
| deployment_url=https://api.render.com/deploy/srv-ctprhq52ng1s73du7ob0?key=Y9HLog7dS8I | |
| echo "Encoded complete: ${deployment_url}?&imgURL=${encoded_url}" | |
| curl -v -X POST "${deployment_url}&imgURL=${encoded_url}" | |
| - name: Trigger Render Deployment - 2 | |
| env: | |
| deploy_url: ${{ secrets.RENDER_DEPLOY_HOOK_URL }} | |
| run: | | |
| lower_owner=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]') | |
| image_url=ghcr.io/$lower_owner/pecha-frontend:pecha-frontend:12732320595-945a6f7 | |
| deployment_url=https://api.render.com/deploy/srv-ctprhq52ng1s73du7ob0?key=Y9HLog7dS8I | |
| echo "Encoded complete: ${deployment_url}&imgURL=${image_url}" | |
| curl -v -X POST "${deployment_url}&imgURL=${image_url}" | |
| sonarQube: | |
| if: github.event_name == 'workflow_dispatch' | |
| name: SonarQube Scan | |
| needs: [buildDockerImage] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Set up Python version | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.12' | |
| - name: Install dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install poetry | |
| poetry install | |
| - name: Run tests with coverage | |
| run: poetry run pytest --cov=your_package_name --cov-report=xml | |
| - name: SonarQube Scan | |
| uses: SonarSource/[email protected] | |
| env: | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| with: | |
| args: > | |
| -Dsonar.projectKey=your_project_key | |
| -Dsonar.organization=your_organization | |
| -Dsonar.host.url=https://sonarcloud.io | |
| -Dsonar.python.version=3.12 | |