Skip to content

Commit

Permalink
Add GitHub workflows for build, dependency check, secret scanning, an…
Browse files Browse the repository at this point in the history
…d SonarCloud analysis; update Package.resolved and add CODEOWNERS file
  • Loading branch information
phisakel committed Nov 17, 2024
1 parent fb7b7b3 commit d9030e8
Show file tree
Hide file tree
Showing 6 changed files with 73 additions and 4 deletions.
1 change: 1 addition & 0 deletions .github/CODEOWNERS
Validating CODEOWNERS rules …
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
* @eu-digital-identity-wallet/niscy-admins
22 changes: 22 additions & 0 deletions .github/workflows/build-package.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
---
name: build-package
on:
pull_request:
types: [opened, reopened]
push:
branches: ['main']
tags: [ v* ]
jobs:
build:
runs-on: "macos-14"
steps:
- uses: maxim-lobanov/setup-xcode@v1
with:
xcode-version: '16.0'
- name: Get swift version
run: swift --version
- uses: actions/checkout@v4
- name: Build
run: swift build
- name: Run tests
run: swift test
15 changes: 15 additions & 0 deletions .github/workflows/dependencycheck.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
name: SCA - Dependency-Check Caller
on:
push:
branches-ignore:
- 'dependabot/**'
workflow_dispatch:

jobs:

SCA_caller:
uses: eu-digital-identity-wallet/eudi-infra-ci/.github/workflows/sca.yml@main
secrets:
NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
DOJO_TOKEN: ${{ secrets.DOJO_TOKEN }}
DOJO_URL: ${{ secrets.DOJO_URL }}
14 changes: 14 additions & 0 deletions .github/workflows/gitleaks.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
name: Secret Scanning - Gitleaks Caller
on:
push:
branches-ignore:
- 'dependabot/**'
workflow_dispatch:

jobs:

Secret_Scanning_caller:
uses: eu-digital-identity-wallet/eudi-infra-ci/.github/workflows/secretscanning.yml@main
secrets:
DOJO_TOKEN: ${{ secrets.DOJO_TOKEN }}
DOJO_URL: ${{ secrets.DOJO_URL }}
17 changes: 17 additions & 0 deletions .github/workflows/sonar.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
name: SAST - SonarCloud Caller
on:
push:
branches-ignore:
- 'dependabot/**'
pull_request_target:
workflow_dispatch:

jobs:

SAST_caller:
uses: eu-digital-identity-wallet/eudi-infra-ci/.github/workflows/sast_action.yml@main
secrets:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
DOJO_TOKEN: ${{ secrets.DOJO_TOKEN }}
DOJO_URL: ${{ secrets.DOJO_URL }}
8 changes: 4 additions & 4 deletions Package.resolved
Original file line number Diff line number Diff line change
@@ -1,13 +1,13 @@
{
"originHash" : "fae81f6b1e0612c6a226b698efc30c0371654cbc54cc06eb304e3d22aa1ceb49",
"originHash" : "67d6e755c4890cdfcb60930d0b952815385f42101d98ff3d40456723c03c6c74",
"pins" : [
{
"identity" : "eudi-lib-ios-rqes-csc-swift",
"kind" : "remoteSourceControl",
"location" : "https://github.com/niscy-eudiw/eudi-lib-ios-rqes-csc-swift.git",
"location" : "https://github.com/eu-digital-identity-wallet/eudi-lib-ios-rqes-csc-swift.git",
"state" : {
"branch" : "update-auth-flow",
"revision" : "075987ef5f098e2ac866504ed8c55514fe4cb1b3"
"revision" : "d286db938dd6bddcd2aa22051e54211227cf5cba",
"version" : "0.0.1"
}
},
{
Expand Down

0 comments on commit d9030e8

Please sign in to comment.