Browse Source

code formatting

pull/7/head
Daniel Gibbs 3 years ago
parent
commit
bddb7204b8
No known key found for this signature in database GPG Key ID: 4D812BAB6228BBA6
  1. 3
      .github/dependabot.yml
  2. 8
      .github/workflows/codacy-analysis.yml
  3. 22
      .github/workflows/docker-publish.yml
  4. 48
      .github/workflows/snyk-container.yml

3
.github/dependabot.yml

@ -1,8 +1,7 @@
# Set update schedule for GitHub Actions # Set update schedule for GitHub Actions
- name: Dependabot - name: Dependabot
version: 2 version: 2
updates: updates:
- package-ecosystem: "github-actions" - package-ecosystem: "github-actions"
directory: "/" directory: "/"
schedule: schedule:

8
.github/workflows/codacy-analysis.yml

@ -15,12 +15,12 @@ name: Codacy Security Scan
on: on:
push: push:
branches: [ "main" ] branches: ["main"]
pull_request: pull_request:
# The branches below must be a subset of the branches above # The branches below must be a subset of the branches above
branches: [ "main" ] branches: ["main"]
schedule: schedule:
- cron: '28 22 * * 4' - cron: "28 22 * * 4"
permissions: permissions:
contents: read contents: read
@ -30,7 +30,7 @@ jobs:
permissions: permissions:
contents: read # for actions/checkout to fetch code contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
name: Codacy Security Scan name: Codacy Security Scan
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:

22
.github/workflows/docker-publish.yml

@ -3,38 +3,32 @@ name: Docker Publish
on: on:
push: push:
branches: branches:
- 'main' - "main"
schedule: schedule:
- cron: '0 0 * * *' - cron: "0 0 * * *"
jobs: jobs:
docker: docker:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- - name: Checkout
name: Checkout
uses: actions/checkout@v3 uses: actions/checkout@v3
- - name: Set up QEMU
name: Set up QEMU
uses: docker/setup-qemu-action@v2 uses: docker/setup-qemu-action@v2
- - name: Set up Docker Buildx
name: Set up Docker Buildx
uses: docker/[email protected] uses: docker/[email protected]
- - name: Login to DockerHub
name: Login to DockerHub
uses: docker/[email protected] uses: docker/[email protected]
with: with:
username: ${{ secrets.DOCKER_HUB_USERNAME }} username: ${{ secrets.DOCKER_HUB_USERNAME }}
password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }} password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
- - name: Login to GitHub Container Registry
name: Login to GitHub Container Registry
uses: docker/[email protected] uses: docker/[email protected]
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- - name: Build and push
name: Build and push
uses: docker/[email protected] uses: docker/[email protected]
with: with:
context: . context: .

48
.github/workflows/snyk-container.yml

@ -15,12 +15,12 @@ name: Snyk Container
on: on:
push: push:
branches: [ "main" ] branches: ["main"]
pull_request: pull_request:
# The branches below must be a subset of the branches above # The branches below must be a subset of the branches above
branches: [ "main" ] branches: ["main"]
schedule: schedule:
- cron: '45 1 * * 4' - cron: "45 1 * * 4"
permissions: permissions:
contents: read contents: read
@ -30,26 +30,26 @@ jobs:
permissions: permissions:
contents: read # for actions/checkout to fetch code contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@v3
- name: Build a Docker image - name: Build a Docker image
run: docker build -t gameservermanagers/steamcmd . run: docker build -t gameservermanagers/steamcmd .
- name: Run Snyk to check Docker image for vulnerabilities - name: Run Snyk to check Docker image for vulnerabilities
# Snyk can be used to break the build when it detects vulnerabilities. # Snyk can be used to break the build when it detects vulnerabilities.
# In this case we want to upload the issues to GitHub Code Scanning # In this case we want to upload the issues to GitHub Code Scanning
continue-on-error: true continue-on-error: true
uses: snyk/actions/docker@14818c4695ecc4045f33c9cee9e795a788711ca4 uses: snyk/actions/docker@14818c4695ecc4045f33c9cee9e795a788711ca4
env: env:
# In order to use the Snyk Action you will need to have a Snyk API token. # In order to use the Snyk Action you will need to have a Snyk API token.
# More details in https://github.com/snyk/actions#getting-your-snyk-token # More details in https://github.com/snyk/actions#getting-your-snyk-token
# or you can signup for free at https://snyk.io/login # or you can signup for free at https://snyk.io/login
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with: with:
image: gameservermanagers/steamcmd image: gameservermanagers/steamcmd
args: --file=Dockerfile args: --file=Dockerfile
- name: Upload result to GitHub Code Scanning - name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v2 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: snyk.sarif sarif_file: snyk.sarif

Loading…
Cancel
Save