Skip to content

IgorBalog-Eng/docker_cosign

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

GitHub Workflow example project

diagram

.github\workflows\ folder, check for specific GHA file:

feature_hotfix.yml

Used when code is pushed to branch prefixed with feature/ or hotfix/

Customize GHA to fit your needs. For now, just run mvn clean package

develop.yml

Executed when code is pushed to develop branch.

maven_release.yml

Manual trigger of the GHA.
Perform mvn release:prepare and mvn release:perform.

Input parameters:
release version
next development version
tag version

docker-publish.yml

Manual trigger of the GHA.
Build docker image, and push it to dockerhub.
Sign with cosign.

Input parameters:
versionName
tagMessage

snyk.yml

Manual trigger of the GHA.

Execute snyk code analysis for security vulnerabilities.

Pre-requisite:
Create account in snyk.io
Get snyk API token from Account Settings
Copy it and create new Action secret - SNYK_TOKEN