e055af9afe
Some checks failed
Dev CI / Backend — Lint (push) Failing after 1m5s
Dev CI / Backend — Unit Tests (push) Has been skipped
Dev CI / Security gate (push) Failing after 1m20s
Dev CI / Frontend — Lint & Type-check (push) Successful in 1m46s
Dev CI / Frontend — Unit Tests (push) Successful in 1m21s
Dev CI / Notify Failure (push) Has been skipped
24 lines
921 B
YAML
24 lines
921 B
YAML
name: Security gate
|
|
description: Dependency, secrets, infrastructure and workflow checks for Gitea 1.22.
|
|
runs:
|
|
using: composite
|
|
steps:
|
|
- uses: ./.gitea/actions/setup-node
|
|
- uses: ./.gitea/actions/setup-trivy
|
|
- name: Validate workflows and deployment checks
|
|
shell: bash
|
|
run: |
|
|
actionlint_bin=$(bash scripts/ci/install-tool.sh actionlint)
|
|
ACTIONLINT_BIN="$actionlint_bin" bash scripts/ci/validate-workflows.sh
|
|
- name: Audit dependencies, secrets and infrastructure
|
|
shell: bash
|
|
run: bash scripts/ci/security-audit.sh
|
|
- name: Save security reports on Gitea
|
|
if: always()
|
|
uses: https://github.com/actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3, Gitea artifact protocol
|
|
with:
|
|
name: security-reports
|
|
path: ${{ runner.temp }}/security-reports/*.json
|
|
retention-days: 7
|
|
if-no-files-found: error
|