extends the .gitignore for cert and ssh (#2572) #2978
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build repo | |
| on: | |
| push: | |
| branches: ["main"] | |
| pull_request: | |
| branches: ["main"] | |
| permissions: read-all | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| jdk-version: [17, 21] | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout repository | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Set up JDK ${{ matrix.jdk-version }} | |
| uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0 | |
| with: | |
| java-version: ${{ matrix.jdk-version }} | |
| distribution: "temurin" | |
| - name: Build with Gradle and no spring security | |
| run: ./gradlew clean build | |
| env: | |
| DOCKER_ENABLE_SECURITY: false | |
| - name: Build with Gradle and with spring security | |
| run: ./gradlew clean build | |
| env: | |
| DOCKER_ENABLE_SECURITY: true | |
| docker-compose-tests: | |
| # if: github.event_name == 'push' && github.ref == 'refs/heads/main' || | |
| # (github.event_name == 'pull_request' && | |
| # contains(github.event.pull_request.labels.*.name, 'licenses') == false && | |
| # ( | |
| # contains(github.event.pull_request.labels.*.name, 'Front End') || | |
| # contains(github.event.pull_request.labels.*.name, 'Java') || | |
| # contains(github.event.pull_request.labels.*.name, 'Back End') || | |
| # contains(github.event.pull_request.labels.*.name, 'Security') || | |
| # contains(github.event.pull_request.labels.*.name, 'API') || | |
| # contains(github.event.pull_request.labels.*.name, 'Docker') || | |
| # contains(github.event.pull_request.labels.*.name, 'Test') | |
| # ) | |
| # ) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout Repository | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Set up Java 17 | |
| uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0 | |
| with: | |
| java-version: "17" | |
| distribution: "adopt" | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0 | |
| - name: Install Docker Compose | |
| run: | | |
| sudo curl -SL "https://github.com/docker/compose/releases/download/v2.29.1/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose | |
| sudo chmod +x /usr/local/bin/docker-compose | |
| - name: Set up Python | |
| uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0 | |
| with: | |
| python-version: "3.12" | |
| - name: Pip requirements | |
| run: | | |
| pip install -r ./cucumber/requirements.txt | |
| - name: Run Docker Compose Tests | |
| run: | | |
| chmod +x ./test.sh | |
| ./test.sh |