Skip to content

Commit bac486b

Browse files
author
Matthew Jadud
authored
Merge pull request #4409 from GSA-TTS/main
2 parents 332edc7 + f50d9cc commit bac486b

File tree

73 files changed

+1841
-855
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

73 files changed

+1841
-855
lines changed

‎.github/workflows/deploy-application.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -126,3 +126,11 @@ jobs:
126126
cf_space: ${{ env.space }}
127127
command: cf restart logshipper
128128

129+
check-tables:
130+
needs: [push-with-creds]
131+
uses: ./.github/workflows/fac-check-tables.yml
132+
secrets: inherit
133+
with:
134+
environment: ${{ inputs.environment }}
135+
util_version: "v0.1.8"
136+
backup_operation: "check_tables"

‎.github/workflows/fac-backup-scheduler.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,6 @@ jobs:
1919
secrets: inherit
2020
with:
2121
environment: ${{ matrix.environment.name }}
22-
util_version: "v0.1.5"
22+
util_version: "v0.1.8"
2323
backup_operation: "scheduled_backup"
2424

‎.github/workflows/fac-backup-util-scheduled.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
---
22
name: Backup the database with fac-backup-utility
33
### Common Commands:
4-
# ./fac-backup-util.sh v0.1.5 scheduled_backup
5-
# ./fac-backup-util.sh v0.1.5 daily_backup
4+
# ./fac-backup-util.sh v0.1.8 scheduled_backup
5+
# ./fac-backup-util.sh v0.1.8 daily_backup
66
on:
77
workflow_call:
88
inputs:

‎.github/workflows/fac-backup-util.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
---
22
name: Backup the database with fac-backup-utility
33
### Common Commands:
4-
# ./fac-backup-util.sh v0.1.5 initial_backup
5-
# ./fac-backup-util.sh v0.1.5 deploy_backup
4+
# ./fac-backup-util.sh v0.1.8 initial_backup
5+
# ./fac-backup-util.sh v0.1.8 deploy_backup
66
on:
77
workflow_dispatch:
88
inputs:

‎.github/workflows/fac-check-tables-scheduler.yml‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
---
2+
name: Check Tables Daily
3+
on:
4+
schedule:
5+
# Invoke every 12 hours
6+
- cron: '0 */12 * * *'
7+
workflow_dispatch: null
8+
9+
jobs:
10+
check-tables:
11+
strategy:
12+
fail-fast: false
13+
matrix:
14+
environment:
15+
- name: dev
16+
- name: staging
17+
- name: production
18+
- name: preview
19+
uses: ./.github/workflows/fac-check-tables.yml
20+
secrets: inherit
21+
with:
22+
environment: ${{ matrix.environment.name }}
23+
util_version: "v0.1.8"
24+
backup_operation: "check_tables"

‎.github/workflows/fac-check-tables.yml‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
---
2+
name: Check existing tables in an environment
3+
### Common Commands:
4+
# ./fac-backup-util.sh v0.1.8 check_tables
5+
on:
6+
workflow_dispatch:
7+
inputs:
8+
environment:
9+
required: true
10+
type: choice
11+
options:
12+
- 'dev'
13+
- 'preview'
14+
- 'staging'
15+
- 'production'
16+
util_version:
17+
description: Version for fac backup utility to use (ex. vX.Y.Z)
18+
required: true
19+
type: string
20+
backup_operation:
21+
description: Operation for fac-backup-utility
22+
required: true
23+
type: choice
24+
options:
25+
- 'check_tables'
26+
workflow_call:
27+
inputs:
28+
environment:
29+
required: true
30+
type: string
31+
util_version:
32+
description: Version for fac backup utility to use (ex. vX.Y.Z)
33+
required: true
34+
type: string
35+
backup_operation:
36+
description: Operation for fac-backup-utility
37+
required: true
38+
type: string
39+
jobs:
40+
fac-check-tables:
41+
name: Check tables in FAC Database
42+
runs-on: ubuntu-latest
43+
environment: ${{ inputs.environment }}
44+
env:
45+
space: ${{ inputs.environment }}
46+
steps:
47+
- name: Check tables in ${{ env.space }}
48+
uses: cloud-gov/cg-cli-tools@main
49+
with:
50+
cf_username: ${{ secrets.CF_USERNAME }}
51+
cf_password: ${{ secrets.CF_PASSWORD }}
52+
cf_org: gsa-tts-oros-fac
53+
cf_space: ${{ env.space }}
54+
command: cf run-task gsa-fac -k 2G -m 3G --name check_tables --command "./fac-backup-util.sh ${{ inputs.util_version }} ${{ inputs.backup_operation }}"

‎.github/workflows/testing-from-build.yml‎

Lines changed: 17 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -47,12 +47,25 @@ jobs:
4747
pwd
4848
ls -al | grep 'coverage'
4949
50-
- name: Coverage Action
50+
- name: Code Coverage Summary Report
51+
uses: irongut/[email protected]
52+
with:
53+
filename: ./coverage.xml
54+
badge: true
55+
fail_below_min: true
56+
format: markdown
57+
hide_branch_rate: false
58+
hide_complexity: true
59+
indicators: true
60+
output: both
61+
thresholds: '85 90'
62+
63+
- name: Add Coverage PR Comment
64+
uses: marocchino/sticky-pull-request-comment@v2
5165
if: github.event_name == 'pull_request'
52-
uses: orgoro/[email protected]
5366
with:
54-
coverageFile: ./coverage.xml
55-
token: ${{ secrets.GITHUB_TOKEN }}
67+
recreate: true
68+
path: code-coverage-results.md
5669

5770
a11y-testing:
5871
runs-on: ubuntu-latest

‎.github/workflows/testing-from-ghcr.yml‎

Lines changed: 17 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -49,12 +49,25 @@ jobs:
4949
pwd
5050
ls -al | grep 'coverage'
5151
52-
- name: Coverage Action
52+
- name: Code Coverage Summary Report
53+
uses: irongut/[email protected]
54+
with:
55+
filename: ./coverage.xml
56+
badge: true
57+
fail_below_min: false
58+
format: markdown
59+
hide_branch_rate: false
60+
hide_complexity: true
61+
indicators: true
62+
output: both
63+
thresholds: '85'
64+
65+
- name: Add Coverage PR Comment
66+
uses: marocchino/sticky-pull-request-comment@v2
5367
if: github.event_name == 'pull_request'
54-
uses: orgoro/[email protected]
5568
with:
56-
coverageFile: ./coverage.xml
57-
token: ${{ secrets.GITHUB_TOKEN }}
69+
recreate: true
70+
path: code-coverage-results.md
5871

5972
a11y-testing:
6073
runs-on: ubuntu-latest

‎.github/workflows/trivy.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
run: docker build -t ${{ env.DOCKER_NAME }}:${{ steps.date.outputs.date }} .
4040

4141
- name: Run Trivy vulnerability scanner
42-
uses: aquasecurity/trivy-action@0.27.0
42+
uses: aquasecurity/trivy-action@0.28.0
4343
with:
4444
image-ref: '${{ env.DOCKER_NAME }}:${{ steps.date.outputs.date }}'
4545
scan-type: 'image'
@@ -74,7 +74,7 @@ jobs:
7474
run: docker pull ${{ matrix.image.name }}
7575

7676
- name: Run Trivy vulnerability scanner on Third Party Images
77-
uses: aquasecurity/trivy-action@0.27.0
77+
uses: aquasecurity/trivy-action@0.28.0
7878
with:
7979
image-ref: '${{ matrix.image.name }}'
8080
scan-type: 'image'

‎.github/workflows/zap-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
uses: actions/checkout@v4
1919

2020
- name: ZAP Scan of ${{ env.url }}
21-
uses: zaproxy/action-baseline@v0.12.0
21+
uses: zaproxy/action-baseline@v0.13.0
2222
with:
2323
token: ${{ secrets.GITHUB_TOKEN }}
2424
docker_name: 'ghcr.io/zaproxy/zaproxy:stable'

0 commit comments

Comments
 (0)