36 lines
1019 B
YAML
36 lines
1019 B
YAML
when:
|
|
- event: [push, pull_request, manual]
|
|
branch: [master, feature/*]
|
|
|
|
steps:
|
|
- name: trivy-scan
|
|
image: aquasec/trivy:latest
|
|
commands:
|
|
- trivy fs --scanners vuln,config --exit-code 1 --ignorefile .trivyignore --severity HIGH,CRITICAL frontend/
|
|
|
|
- name: lint-frontend
|
|
image: node:24
|
|
commands:
|
|
- cd frontend
|
|
- npm install
|
|
- npm run lint
|
|
|
|
- name: build-and-publish
|
|
image: woodpeckerci/plugin-docker-buildx
|
|
settings:
|
|
registry:
|
|
from_secret: docker_registry
|
|
repo:
|
|
from_secret: portfolio_docker_repo
|
|
tags:
|
|
- latest
|
|
- 1.0.0-${CI_PIPELINE_NUMBER} # Ref: https://woodpecker-ci.org/docs/usage/environment
|
|
skip_tls_verify: false # set to true for testing registries ONLY with self-signed certs
|
|
build_args:
|
|
- COMMIT_SHA=${CI_COMMIT_SHA}
|
|
- COMMIT_AUTHOR_EMAIL=${CI_COMMIT_AUTHOR_EMAIL}
|
|
username:
|
|
from_secret: docker-username
|
|
password:
|
|
from_secret: docker-password
|