Skip to content

Merge pull request #441 from bcgov/release/0.5.0 #65

Merge pull request #441 from bcgov/release/0.5.0

Merge pull request #441 from bcgov/release/0.5.0 #65

name: dps-email-poller - Build Image
on:
push:
branches:
- main
paths:
- "src/dps-email-poller/**"
- ".github/workflows/dev-dps-email-poller.yml"
workflow_dispatch:
branches:
- main
env:
NEXUS_URL: ${{secrets.NEXUS_URL}}
jobs:
unit-test:
uses: SierraSystems/reusable-workflows/.github/workflows/java-unit-tests.yml@main
with:
working_directory: "src"
profile: dps-email-poller
secrets:
nexus_url: ${{ secrets.NEXUS_URL }}
#app-version:
# uses: SierraSystems/reusable-workflows/.github/workflows/java-maven-app-version.yml@main
# with:
# working_directory: "src/dps-email-poller"
#build-image:
#needs:
# - unit-test
# #- app-version
# #- get-app-version
#uses: SierraSystems/reusable-workflows/.github/workflows/docker-build-image.yml@main
#with:
# app_name: "dps-email-poller"
# working_directory: .
# build_args: |-
# DPS_SERVICE_NAME=${{ github.event.inputs.app_name }}
# MVN_PROFILES=${{ github.event.inputs.app_name }},openshift
build-image:
name: Build Docker image to make sure it works
runs-on: ubuntu-latest
defaults:
run:
working-directory: .
steps:
- uses: actions/checkout@v2
- name: Docker Build
run: |
docker build -t dps-email-poller -f src/dps-email-poller/Dockerfile .
trivy:
needs:
- build-image
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Vulnerability Scan
uses: Azure/container-scan@v0
continue-on-error: true
with:
image-name: ${{ secrets.OPENSHIFT_SERVER_URL_SILVER }}/${{ secrets.OPENSHIFT_LICENSE_PLATE_SILVER }}-tools/${{ inputs.app_name }}:latest
- name: Authenticate and set context
uses: redhat-actions/oc-login@v1
with:
openshift_server_url: ${{ secrets.OPENSHIFT_SERVER_URL_SILVER }}
openshift_token: ${{ secrets.OPENSHIFT_SA_PIPELINE_TOKEN_SILVER }}
namespace: ${{ secrets.OPENSHIFT_LICENSE_PLATE_SILVER }}-tools
- name: Login to OpenShift Container Repository
uses: docker/login-action@v1
with:
registry: ${{ secrets.OPENSHIFT_EXTERNAL_REPOSITORY_SILVER }}
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
- name: Pull Image for Scanning
run: |
docker pull ${{ secrets.OPENSHIFT_SERVER_URL_SILVER }}/${{ secrets.OPENSHIFT_LICENSE_PLATE_SILVER }}-tools/${{ inputs.app_name }}:latest