ci: integrate Bright CI pipeline for security testing and remediation

.github/workflows/build_and_push_stable.yml

@@ -1,41 +1,37 @@
 name: "Build and Push Docker Image (On Push to Stable)"
-
 on:
-  push:
-    branches:
-      - stable
+  workflow_dispatch:
+# on:
+#   push:
+#     branches:
+#       - stable
 
 jobs:
   docker-build-push:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
-
       - name: Login to DockerHub
         run: |
           docker login --username=${{ vars.DOCKERHUB_DULL_USER }} --password=${{ secrets.DOCKERHUB_DULL_TOKEN }}
-
       - name: Generate timestamp
         id: timestamp
         run: echo "TIMESTAMP=$(date +%Y%m%d%H%M%S)" >> $GITHUB_ENV
-
       - name: Generate short SHA
         id: sha
         run: echo "SHORT_SHA=$(echo ${{ github.sha }} | cut -c1-6)" >> $GITHUB_ENV
-
       - name: Build and tag Docker images
         run: |
           for TAG_PREFIX in stable unstable; do
             docker build -t bramkor/pureflow:${TAG_PREFIX} .
             docker tag bramkor/pureflow:${TAG_PREFIX} bramkor/pureflow:${TAG_PREFIX}-${{ env.SHORT_SHA }}
             docker tag bramkor/pureflow:${TAG_PREFIX} bramkor/pureflow:${TAG_PREFIX}-${{ env.SHORT_SHA }}-${{ env.TIMESTAMP }}
           done
-
       - name: Push Docker images
-        run: |
+        run: |-
           for TAG_PREFIX in stable unstable; do
             docker push bramkor/pureflow:${TAG_PREFIX}
             docker push bramkor/pureflow:${TAG_PREFIX}-${{ env.SHORT_SHA }}
             docker push bramkor/pureflow:${TAG_PREFIX}-${{ env.SHORT_SHA }}-${{ env.TIMESTAMP }}
-          done
+          done

.github/workflows/build_and_push_unstable.yml

@@ -1,31 +1,29 @@
 name: "Build and Push Docker Image (Manual)"
 on:
   workflow_dispatch:
-    inputs:
-      tag_prefix:
-        description: 'Tag prefix to use (defaults to unstable)'
-        required: false
-        default: 'unstable'
+# on:
+#   workflow_dispatch:
+#     inputs:
+#       tag_prefix:
+#         description: 'Tag prefix to use (defaults to unstable)'
+#         required: false
+#         default: 'unstable'
 
 jobs:
   docker-build-push:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
-
       - name: Login to DockerHub
         run: |
           docker login --username=${{ vars.DOCKERHUB_DULL_USER }} --password=${{ secrets.DOCKERHUB_DULL_TOKEN }}
-
       - name: Generate timestamp
         id: timestamp
         run: echo "TIMESTAMP=$(date +%Y%m%d%H%M%S)" >> $GITHUB_ENV
-
       - name: Generate short SHA
         id: sha
         run: echo "SHORT_SHA=$(echo ${{ github.sha }} | cut -c1-6)" >> $GITHUB_ENV
-
       - name: Set tag prefix
         id: set_tag_prefix
         run: |
@@ -36,13 +34,11 @@ jobs:
             TAG_PREFIX="${{ github.event.inputs.tag_prefix }}"
           fi
           echo "TAG_PREFIX=${TAG_PREFIX}" >> $GITHUB_ENV
-
       - name: Build Docker image
         run: |
           docker build -t dull/pureflow:${{ env.TAG_PREFIX }} .
           docker tag dull/pureflow:${{ env.TAG_PREFIX }} brdullc/pureflow:${{ env.TAG_PREFIX }}-${{ env.SHORT_SHA }}
           docker tag dull/pureflow:${{ env.TAG_PREFIX }} brdullc/pureflow:${{ env.TAG_PREFIX }}-${{ env.SHORT_SHA }}-${{ env.TIMESTAMP }}
-
       - name: Push Docker images
         run: |
           docker push dull/pureflow:${{ env.TAG_PREFIX }}

.github/workflows/check-client.yml

@@ -1,26 +1,23 @@
 name: "React Front-End CI checks"
-
 on:
-  pull_request:
-    branches:
-      - '**'
-
-  push:
-    branches:
-      - stable
-      - unstable
-
-    paths:
-      - 'client/**'
-      - '.github/workflows/*client.yml'
+  workflow_dispatch:
+# on:
+#   pull_request:
+#     branches:
+#       - '**'
+#   push:
+#     branches:
+#       - stable
+#       - unstable
+#     paths:
+#       - 'client/**'
+#       - '.github/workflows/*client.yml'
 
 env:
   HUSKY: 0
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
-
 jobs:
   check:
     runs-on: ubuntu-latest
@@ -30,23 +27,17 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-
       - name: Setup Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-
       - name: Disable prepare script (husky)
         run: npm pkg delete scripts.prepare
-
       - name: Install dependencies
         run: npm ci --prefix=client --no-audit
-
       - name: Check format
         run: npm run format --prefix=client
-
       - name: Lint
         run: npm run lint --prefix=client
-
       - name: Build
         run: npm run build --prefix=client

.github/workflows/check.yml

@@ -1,28 +1,25 @@
 name: "Nest Back-End CI checks"
-
 on:
-  pull_request:
-    branches:
-      - '**'
-
-  push:
-    branches:
-      - stable
-      - unstable
-
-    paths:
-      - '*'
-      - 'src/**'
-      - 'test/**'
-      - '.github/workflows/check.yml'
+  workflow_dispatch:
+# on:
+#   pull_request:
+#     branches:
+#       - '**'
+#   push:
+#     branches:
+#       - stable
+#       - unstable
+#     paths:
+#       - '*'
+#       - 'src/**'
+#       - 'test/**'
+#       - '.github/workflows/check.yml'
 
 env:
   HUSKY: 0
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
-
 jobs:
   check:
     runs-on: ubuntu-latest
@@ -32,26 +29,19 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-
       - name: Setup Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-
       - name: Disable prepare script (husky)
         run: npm pkg delete scripts.prepare
-
       - name: Install dependencies
         run: npm ci --no-audit
-
       - name: Check format
         run: npm run format
-
       - name: Lint
         run: npm run lint
-
       - name: Build
         run: npm run build
-
       - name: Test
         run: npm run test