diff --git a/.github/workflows/gitleaks.yaml b/.github/workflows/gitleaks.yaml deleted file mode 100644 index bb431f7..0000000 --- a/.github/workflows/gitleaks.yaml +++ /dev/null @@ -1,36 +0,0 @@ -name: GitLeaks -on: [pull_request] - -concurrency: - group: gitleaks-${{ github.ref }} - cancel-in-progress: true - -jobs: - gitleaks-scan: - runs-on: ubuntu-latest - container: - image: gcr.io/spectro-dev-public/bulwark/gitleaks:latest - env: - REPO: ${{ github.event.repository.name }} - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - GITLEAKS_CONFIG: config.toml - steps: - - - name: run-bulwark-gitleaks-scan - shell: sh - env: - BRANCH: ${{ github.head_ref || github.ref_name }} - run: /workspace/bulwark -name CodeSASTGitLeaks -target $REPO -tags "branch:$BRANCH,options:--log-opts origin..HEAD" - - - name: check-result - shell: sh - run: | - resultPath=./$REPO/gitleaks.json - cat $resultPath | grep -v \"Match\"\: | grep -v \"Secret\"\: - total_failed_tests=`cat $resultPath | grep \"Fingerprint\"\: | wc -l` - if [ "$total_failed_tests" -gt 0 ]; then - echo "GitLeaks validation check failed with above findings..." - exit 1 - else - echo "GitLeaks validation check passed" - fi \ No newline at end of file diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index b84600b..d0d088d 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -14,6 +14,7 @@ env: PALETTE_REGISTRY_CLI_VERSION: 4.6.1 K9S_VERSION: 0.32.5 SPECTRO_CLI_VERSION: 4.6.0 + NODE_VERSION: "22" jobs: docker: @@ -25,7 +26,7 @@ jobs: - name: Setup nodeJs uses: actions/setup-node@v6 with: - node-version: "20" + node-version: ${{ env.NODE_VERSION }} - name: Check out code into the Go module directory uses: actions/checkout@v6 @@ -103,7 +104,7 @@ jobs: - name: Setup Nodejs uses: actions/setup-node@v6 with: - node-version: 18 + node-version: ${{ env.NODE_VERSION }} - name: Install dependencies run: npm ci diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 77963bb..98783d6 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -17,7 +17,8 @@ env: TERRAFORM_VERSION: 1.9.0 PALETTE_REGISTRY_CLI_VERSION: 4.5.0 K9S_VERSION: 0.32.5 - SPECTRO_CLI_VERSION: 4.6.0 + SPECTRO_CLI_VERSION: 4.6.0 + NODE_VERSION: "22" concurrency: group: docker-${{ github.ref }} @@ -49,7 +50,7 @@ jobs: - name: Setup Nodejs uses: actions/setup-node@v6 with: - node-version: "20" + node-version: ${{ env.NODE_VERSION }} - name: Install dependencies run: npm ci @@ -83,3 +84,23 @@ jobs: PALETTE_REGISTRY_CLI_VERSION=${{env.PALETTE_REGISTRY_CLI_VERSION}} K9S_VERSION=${{env.K9S_VERSION}} SPECTRO_CLI_VERSION=${{env.SPECTRO_CLI_VERSION}} + + semantic: + name: "Semantic Release Dry Run" + needs: [run-ci] + runs-on: ubuntu-latest + if: ${{ !github.event.pull_request.draft }} + steps: + - name: Setup nodeJs + uses: actions/setup-node@v6 + with: + node-version: ${{ env.NODE_VERSION }} + + - name: Check out code into the Go module directory + uses: actions/checkout@v6 + + - name: Install dependencies + run: npm ci + + - name: Semantic Release Dry Run + run: npx semantic-release --dry-run