generated from bryopsida/nestjs-starter
-
Notifications
You must be signed in to change notification settings - Fork 0
40 lines (39 loc) · 1020 Bytes
/
ci.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
name: CI
on:
push:
branches: ['main']
pull_request:
branches: ['main']
jobs:
validate-node:
name: 'Validate'
uses: curium-rocks/flows/.github/workflows/node-ts.yml@main
permissions:
contents: read
actions: read
security-events: write
with:
continue-on-prod-vulns: false
secrets:
SONARQUBE_KEY: ${{ secrets.SONARQUBE_KEY }}
build-image:
name: 'Build container image'
uses: curium-rocks/flows/.github/workflows/oci-build-image.yml@main
needs: validate-node
permissions:
contents: read
packages: write
security-events: write
id-token: write
with:
registry: ghcr.io/bryopsida
image_name: network-scanner
push_in_pr: true
deploy-container:
needs: build-image
name: 'Helm'
uses: curium-rocks/flows/.github/workflows/helm-qa.yml@main
with:
charts_dir: 'charts'
helm_extra_sets: '--set image.tag=${{ needs.build-image.outputs.build_tag }}'
ct_extra_args: '--all'