diff --git a/.github/workflows/1codeql-analysis.yml b/.github/workflows/1codeql-analysis.yml index 057e8e9..897e298 100644 --- a/.github/workflows/1codeql-analysis.yml +++ b/.github/workflows/1codeql-analysis.yml @@ -39,11 +39,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -54,7 +54,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 # ℹ️ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -68,4 +68,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 diff --git a/.github/workflows/datree-validation.yml b/.github/workflows/datree-validation.yml new file mode 100644 index 0000000..599e882 --- /dev/null +++ b/.github/workflows/datree-validation.yml @@ -0,0 +1,53 @@ +# |=========================== Datree Policy Check ===================================| +# | This workflow will verify that all committed config files in the PR are valid. | +# | If one of the config files is happened to be a K8s config file (manifest), | +# | It will also automatically be tested for schema validation and misconfigurations. | +# | For more info visit: https://github.com/marketplace/datree | +# |===================================================================================| + +name: Datree Workflow + +on: + pull_request: + types: [opened, edited, synchronize, reopened] + +jobs: + configs-validation: + runs-on: ubuntu-latest + env: + DATREE_TOKEN: ${{ secrets.DATREE_TOKEN }} + steps: + - name: Checkout repository + uses: actions/checkout@v4 + with: + fetch-depth: 0 + + - name: Get changed files + id: changed-files + uses: tj-actions/changed-files@v46 + with: + files: | + *.yaml + *.yml + - name: List all changed files + run: echo ${{ steps.changed-files.outputs.all_changed_files }} + + - name: Install Datree's CLI + if: steps.changed-files.outputs.any_changed == 'true' + run: curl https://get.datree.io | /bin/bash -s + + # |=========================== Datree Policy Check ===================================| + # | Prevent Kubernetes misconfigurations from reaching production! | + # | Datree is a CLI tool to ensure K8s configs follow stability & security | + # | best practices as well as your organization’s policies. | + # | For more info visit: https://github.com/datreeio/datree | + # |===================================================================================| + + - name: Datree validate config files + if: steps.changed-files.outputs.any_changed == 'true' + uses: datreeio/action-datree@main # For more info about this Actions visit 👉 https://github.com/datreeio/action-datree + with: + path: ${{ steps.changed-files.outputs.all_changed_files }} + cliArguments: --only-k8s-files + isHelmChart: false + isKustomization: false diff --git a/.github/workflows/dotnet-core-desktop.yml b/.github/workflows/dotnet-core-desktop.yml index 42ec7a5..534f061 100644 --- a/.github/workflows/dotnet-core-desktop.yml +++ b/.github/workflows/dotnet-core-desktop.yml @@ -63,13 +63,13 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: fetch-depth: 0 # Install the .NET Core workload - name: Install .NET Core - uses: actions/setup-dotnet@v2 + uses: actions/setup-dotnet@v4 with: dotnet-version: 3.1.101 @@ -109,7 +109,7 @@ jobs: # Upload the MSIX package: https://github.com/marketplace/actions/upload-artifact - name: Upload build artifacts - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v4 with: name: MSIX Package path: ${{ env.Wap_Project_Directory }}\AppPackages diff --git a/.github/workflows/mobsf.yml b/.github/workflows/mobsf.yml index 0115071..51087bb 100644 --- a/.github/workflows/mobsf.yml +++ b/.github/workflows/mobsf.yml @@ -7,7 +7,7 @@ name: MobSF on: push: - branches: [ "master", * ] + branches: [ "master"] pull_request: branches: [ "master" ] schedule: @@ -24,19 +24,19 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: Setup python - uses: actions/setup-python@v3 + uses: actions/setup-python@v5 with: python-version: 3.8 - name: Run mobsfscan - uses: MobSF/mobsfscan@a60d10a83af68e23e0b30611c6515da604f06f65 + uses: MobSF/mobsfscan@d564d5858face141caf984437c922a9bc55b03b0 with: args: . --sarif --output results.sarif || true - name: Upload mobsfscan report - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: sarif_file: results.sarif diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml new file mode 100644 index 0000000..263f080 --- /dev/null +++ b/.github/workflows/pages.yml @@ -0,0 +1,50 @@ +# Sample workflow for building and deploying a Jekyll site to GitHub Pages +name: Deploy Jekyll with GitHub Pages dependencies preinstalled + +on: + # Runs on pushes targeting the default branch + push: + branches: ["master"] + + # Allows you to run this workflow manually from the Actions tab + workflow_dispatch: + +# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages +permissions: + contents: read + pages: write + id-token: write + +# Allow one concurrent deployment +concurrency: + group: "pages" + cancel-in-progress: true + +jobs: + # Build job + build: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + - name: Setup Pages + uses: actions/configure-pages@v5 + - name: Build with Jekyll + uses: actions/jekyll-build-pages@v1 + with: + source: ./ + destination: ./_site + - name: Upload artifact + uses: actions/upload-pages-artifact@v3 + + # Deployment job + deploy: + environment: + name: github-pages + url: ${{ steps.deployment.outputs.page_url }} + runs-on: ubuntu-latest + needs: build + steps: + - name: Deploy to GitHub Pages + id: deployment + uses: actions/deploy-pages@v4 diff --git a/azure-pipelines.yml b/azure-pipelines.yml new file mode 100644 index 0000000..6d41783 --- /dev/null +++ b/azure-pipelines.yml @@ -0,0 +1,34 @@ +# ASP.NET +# Build and test ASP.NET projects. +# Add steps that publish symbols, save build artifacts, deploy, and more: +# https://docs.microsoft.com/azure/devops/pipelines/apps/aspnet/build-aspnet-4 + +trigger: +- master + +pool: + vmImage: 'windows-latest' + +variables: + solution: '**/*.sln' + buildPlatform: 'Any CPU' + buildConfiguration: 'Release' + +steps: +- task: NuGetToolInstaller@1 + +- task: NuGetCommand@2 + inputs: + restoreSolution: '$(solution)' + +- task: VSBuild@1 + inputs: + solution: '$(solution)' + msbuildArgs: '/p:DeployOnBuild=true /p:WebPublishMethod=Package /p:PackageAsSingleFile=true /p:SkipInvalidConfigurations=true /p:PackageLocation="$(build.artifactStagingDirectory)"' + platform: '$(buildPlatform)' + configuration: '$(buildConfiguration)' + +- task: VSTest@2 + inputs: + platform: '$(buildPlatform)' + configuration: '$(buildConfiguration)'