Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
74 changes: 37 additions & 37 deletions .github/workflows/brakeman-analysis.yml
Original file line number Diff line number Diff line change
@@ -1,44 +1,44 @@
# This workflow integrates Brakeman with GitHub's Code Scanning feature
# Brakeman is a static analysis security vulnerability scanner for Ruby on Rails applications
# # This workflow integrates Brakeman with GitHub's Code Scanning feature
# # Brakeman is a static analysis security vulnerability scanner for Ruby on Rails applications

name: Brakeman Scan
# name: Brakeman Scan

# This section configures the trigger for the workflow. Feel free to customize depending on your convention
on:
push:
branches: [ "master", "main", "release" ]
pull_request:
branches: [ "master", "main", "release" ]
# # This section configures the trigger for the workflow. Feel free to customize depending on your convention
# on:
# push:
# branches: [ "master", "main", "release" ]
# pull_request:
# branches: [ "master", "main", "release" ]

jobs:
brakeman-scan:
name: Brakeman Scan
runs-on: ubuntu-latest
steps:
# Checkout the repository to the GitHub Actions runner
- name: Checkout
uses: actions/checkout@v3
# jobs:
# brakeman-scan:
# name: Brakeman Scan
# runs-on: ubuntu-latest
# steps:
# # Checkout the repository to the GitHub Actions runner
# - name: Checkout
# uses: actions/checkout@v3

# Customize the ruby version depending on your needs
- name: Setup Ruby
uses: ruby/setup-ruby@v1
with:
ruby-version: 3.1.0
# # Customize the ruby version depending on your needs
# - name: Setup Ruby
# uses: ruby/setup-ruby@v1
# with:
# ruby-version: 3.1.0

- name: Setup Brakeman
env:
BRAKEMAN_VERSION: '5.3.1' # SARIF support is provided in Brakeman version 4.10+
run: |
gem install brakeman --version $BRAKEMAN_VERSION
# - name: Setup Brakeman
# env:
# BRAKEMAN_VERSION: '5.3.1' # SARIF support is provided in Brakeman version 4.10+
# run: |
# gem install brakeman --version $BRAKEMAN_VERSION

# Execute Brakeman CLI and generate a SARIF output with the security issues identified during the analysis
- name: Scan
continue-on-error: true
run: |
brakeman -f sarif -o output.sarif.json .
# # Execute Brakeman CLI and generate a SARIF output with the security issues identified during the analysis
# - name: Scan
# continue-on-error: true
# run: |
# brakeman -f sarif -o output.sarif.json .

# Upload the SARIF file generated in the previous step
- name: Upload SARIF
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: output.sarif.json
# # Upload the SARIF file generated in the previous step
# - name: Upload SARIF
# uses: github/codeql-action/upload-sarif@v2
# with:
# sarif_file: output.sarif.json
60 changes: 30 additions & 30 deletions .github/workflows/ci-features.yml
Original file line number Diff line number Diff line change
@@ -1,33 +1,33 @@
name: CI Feature Branches
on:
push:
branches-ignore:
- 'main'
- 'release'
- 'integration'
# name: CI Feature Branches
# on:
# push:
# branches-ignore:
# - 'main'
# - 'release'
# - 'integration'

jobs:
prep-workflow:
name: Prepping Workflow
runs-on: ubuntu-latest
steps:
- name: Check Runner Status
run: echo "Runner is ready to go"
# jobs:
# prep-workflow:
# name: Prepping Workflow
# runs-on: ubuntu-latest
# steps:
# - name: Check Runner Status
# run: echo "Runner is ready to go"

docker-compose-build:
name: Docker Compose Build
needs: prep-workflow
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Build Docker Compose
run: |
docker compose build
# docker-compose-build:
# name: Docker Compose Build
# needs: prep-workflow
# runs-on: ubuntu-latest
# steps:
# - uses: actions/checkout@v4
# - name: Build Docker Compose
# run: |
# docker compose build

ready-for-pr:
name: Ready for PR
needs: docker-compose-build
runs-on: ubuntu-latest
steps:
- name: Ready for Integration
run: echo "Ready for Integration, Open PR to merge feature branch to integration branch"
# ready-for-pr:
# name: Ready for PR
# needs: docker-compose-build
# runs-on: ubuntu-latest
# steps:
# - name: Ready for Integration
# run: echo "Ready for Integration, Open PR to merge feature branch to integration branch"
120 changes: 60 additions & 60 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
@@ -1,70 +1,70 @@
# For most projects, this workflow file will not need changing; you simply need
# to commit it to your repository.
#
# You may wish to alter this file to override the set of languages analyzed,
# or to provide custom queries or build logic.
#
# ******** NOTE ********
# We have attempted to detect the languages in your repository. Please check
# the `language` matrix defined below to confirm you have the correct set of
# supported CodeQL languages.
#
name: "CodeQL"
# # For most projects, this workflow file will not need changing; you simply need
# # to commit it to your repository.
# #
# # You may wish to alter this file to override the set of languages analyzed,
# # or to provide custom queries or build logic.
# #
# # ******** NOTE ********
# # We have attempted to detect the languages in your repository. Please check
# # the `language` matrix defined below to confirm you have the correct set of
# # supported CodeQL languages.
# #
# name: "CodeQL"

on:
push:
branches: [ "master", "main", "release" ]
pull_request:
# The branches below must be a subset of the branches above
branches: [ "master", "release" ]
schedule:
- cron: '28 9 * * 4'
# on:
# push:
# branches: [ "master", "main", "release" ]
# pull_request:
# # The branches below must be a subset of the branches above
# branches: [ "master", "release" ]
# schedule:
# - cron: '28 9 * * 4'

jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
# jobs:
# analyze:
# name: Analyze
# runs-on: ubuntu-latest
# permissions:
# actions: read
# contents: read
# security-events: write

strategy:
fail-fast: false
matrix:
language: [ 'javascript', 'ruby' ]
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
# Learn more about CodeQL language support at https://git.io/codeql-language-support
# strategy:
# fail-fast: false
# matrix:
# language: [ 'javascript', 'ruby' ]
# # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
# # Learn more about CodeQL language support at https://git.io/codeql-language-support

steps:
- name: Checkout repository
uses: actions/checkout@v2
# steps:
# - name: Checkout repository
# uses: actions/checkout@v2

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
# By default, queries listed here will override any specified in a config file.
# Prefix the list here with "+" to use these queries and those in the config file.
# queries: ./path/to/local/query, your-org/your-repo/queries@main
# # Initializes the CodeQL tools for scanning.
# - name: Initialize CodeQL
# uses: github/codeql-action/init@v2
# with:
# languages: ${{ matrix.language }}
# # If you wish to specify custom queries, you can do so here or in a config file.
# # By default, queries listed here will override any specified in a config file.
# # Prefix the list here with "+" to use these queries and those in the config file.
# # queries: ./path/to/local/query, your-org/your-repo/queries@main

# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@v2
# # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# # If this step fails, then you should remove it and run the build manually (see below)
# - name: Autobuild
# uses: github/codeql-action/autobuild@v2

# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
# # ℹ️ Command-line programs to run using the OS shell.
# # 📚 https://git.io/JvXDl

# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
# and modify them (or add more) to build your code if your project
# uses a compiled language
# # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
# # and modify them (or add more) to build your code if your project
# # uses a compiled language

#- run: |
# make bootstrap
# make release
# #- run: |
# # make bootstrap
# # make release

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
# - name: Perform CodeQL Analysis
# uses: github/codeql-action/analyze@v2
104 changes: 52 additions & 52 deletions .github/workflows/e2e-tests.yml
Original file line number Diff line number Diff line change
@@ -1,57 +1,57 @@
name: e2e-tests
on: [push]
jobs:
cypress-run:
name: "Cypress run"
runs-on: ubuntu-latest
strategy:
# when one test fails, DO NOT cancel the other
# containers, because this will kill Cypress processes
# leaving the Dashboard hanging ...
# https://github.com/cypress-io/github-action/issues/48
fail-fast: false
matrix:
# run 4 copies of the current job in parallel
containers: [1, 2, 3]
node-version: [14.18.x]
services:
db:
env:
MYSQL_ALLOW_EMPTY_PASSWORD: yes
image: mysql:8.0
ports:
- 3306
# name: e2e-tests
# on: [push]
# jobs:
# cypress-run:
# name: "Cypress run"
# runs-on: ubuntu-latest
# strategy:
# # when one test fails, DO NOT cancel the other
# # containers, because this will kill Cypress processes
# # leaving the Dashboard hanging ...
# # https://github.com/cypress-io/github-action/issues/48
# fail-fast: false
# matrix:
# # run 4 copies of the current job in parallel
# containers: [1, 2, 3]
# node-version: [14.18.x]
# services:
# db:
# env:
# MYSQL_ALLOW_EMPTY_PASSWORD: yes
# image: mysql:8.0
# ports:
# - 3306


steps:
- name: Checkout
uses: actions/checkout@v3
# steps:
# - name: Checkout
# uses: actions/checkout@v3

- name: Set up Ruby
uses: ruby/setup-ruby@359bebbc29cbe6c87da6bc9ea3bc930432750108
with:
ruby-version: 3.1.0
bundler-cache: true
# - name: Set up Ruby
# uses: ruby/setup-ruby@359bebbc29cbe6c87da6bc9ea3bc930432750108
# with:
# ruby-version: 3.1.0
# bundler-cache: true

- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v1
with:
node-version: ${{ matrix.node-version }}
# - name: Use Node.js ${{ matrix.node-version }}
# uses: actions/setup-node@v1
# with:
# node-version: ${{ matrix.node-version }}

- name: Start rails server and run e2e test
env:
RAILS_ENV: test
MPATH_DATABASE_USERNAME: root
MPATH_DATABASE_PASSWORD: root
MPATH_DATABASE_HOST: 127.0.0.1
CYPRESS_RECORD_KEY: ${{ secrets.CYPRESS_RECORD_KEY }}
run: |
sudo service mysql start
gem install bundler
bundle install --jobs 4 --retry 3
bundle exec rails db:create
bundle exec rails db:migrate RAILS_ENV=test
bundle exec rails db:seed RAILS_ENV=test
bundle exec rails assets:precompile RAILS_ENV=test
bundle exec rails server -e test -p 3000 -d
yarn cypress run --record --parallel --project ./spec --group "Parallel machines"
# - name: Start rails server and run e2e test
# env:
# RAILS_ENV: test
# MPATH_DATABASE_USERNAME: root
# MPATH_DATABASE_PASSWORD: root
# MPATH_DATABASE_HOST: 127.0.0.1
# CYPRESS_RECORD_KEY: ${{ secrets.CYPRESS_RECORD_KEY }}
# run: |
# sudo service mysql start
# gem install bundler
# bundle install --jobs 4 --retry 3
# bundle exec rails db:create
# bundle exec rails db:migrate RAILS_ENV=test
# bundle exec rails db:seed RAILS_ENV=test
# bundle exec rails assets:precompile RAILS_ENV=test
# bundle exec rails server -e test -p 3000 -d
# yarn cypress run --record --parallel --project ./spec --group "Parallel machines"
Loading