Skip to content

Small bugfixes

Small bugfixes #17

Workflow file for this run

# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
name: Backend CI
on:
workflow_dispatch:
push:
branches:
- master
- 'feature/**'
- 'Feature/**'
- 'fix/*'
- 'Fix/*'
paths:
- 'backend/src/**'
- 'backend/tests/unit/**'
pull_request:
branches: [ master ]
paths:
- 'backend/src/**'
- 'backend/tests/unit/**'
jobs:
test:
runs-on: ubuntu-latest
defaults:
run:
working-directory: backend
steps:
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
with:
node-version: '18.x'
- run: npm ci
- run: npm run lint:fix
- run: npm run test:unit
env:
NODE_ENV: 'test'
- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@master
with:
scan-type: 'fs'
ignore-unfixed: true
format: 'template'
template: '@/contrib/sarif.tpl'
output: 'trivy-results.sarif'
severity: 'CRITICAL'
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'trivy-results.sarif'
##- name: SonarCloud Scan
##uses: sonarsource/sonarcloud-github-action@master
##with:
##projectBaseDir: backend
##env:
##GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
##SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}