.github\workflows\ folder, check for specific GHA file:
Used when code is pushed to branch prefixed with feature/ or hotfix/
Customize GHA to fit your needs. For now, just run mvn clean package
Executed when code is pushed to develop branch.
Manual trigger of the GHA.
Perform mvn release:prepare and mvn release:perform.
Input parameters:
release version
next development version
tag version
Manual trigger of the GHA.
Build docker image, and push it to dockerhub.
Sign with cosign.
Input parameters:
versionName
tagMessage
Manual trigger of the GHA.
Execute snyk code analysis for security vulnerabilities.
Pre-requisite:
Create account in snyk.io
Get snyk API token from Account Settings
Copy it and create new Action secret - SNYK_TOKEN