File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1+ name : " Build Docs"
2+ description : " build jekyll docs"
3+ inputs :
4+ version :
5+ description : " Version number"
6+ required : true
7+ runs :
8+ using : " composite"
9+ steps :
10+ - name : Checkout
11+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
12+ - uses : actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
13+ with :
14+ node-version : 18
15+ - name : Install docs node dependencies
16+ working-directory : ./docs
17+ run : pnpm --ignore-workspace install --frozen-lockfile
18+ shell : bash
19+ - name : Setup Ruby
20+ uses : ruby/setup-ruby@3783f195e29b74ae398d7caca108814bbafde90e # v1.180.1
21+ with :
22+ ruby-version : " 3.2" # Not needed with a .ruby-version file
23+ bundler-cache : true # runs 'bundle install' and caches installed gems automatically
24+ cache-version : 0 # Increment this number if you need to re-download cached gems
25+ working-directory : " ./docs"
26+ - name : Setup Pages
27+ id : pages
28+ uses : actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
29+ - name : Build with Jekyll
30+ working-directory : ./docs
31+ # Outputs to the './_site' directory by default
32+ shell : bash
33+ run : make build BASE_URL="$BASE_URL" VERSION="$VERSION"
34+ # run: bundle exec jekyll build --baseurl "${{ steps.pages.outputs.base_path }}"
35+ env :
36+ JEKYLL_ENV : production
37+ BASE_URL : ${{ steps.pages.outputs.base_path }}
38+ VERSION : ${{ inputs.version }}
39+ - name : Upload artifact
40+ # Automatically uploads an artifact from the './_site' directory by default
41+ uses : actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
42+ with :
43+ path : " docs/_site/"
44+ name : jekyll-docs-${{ inputs.version }}
Original file line number Diff line number Diff line change 1+ name : " Check Todo usage"
2+ description : " Check Todo usage"
3+ runs :
4+ using : " composite"
5+ steps :
6+ - name : " Check Todo usage"
7+ shell : bash
8+ run : |
9+ export BRANCH_NAME=origin/${{ github.event.repository.default_branch }}
10+ check=branch ./scripts/githooks/check-todos.sh
Original file line number Diff line number Diff line change 1+ name : Make Config Action
2+ description : Install dependencies and execute make config
3+
4+ runs :
5+ using : composite
6+ steps :
7+ - name : Install dependencies and execute make config
8+ shell : bash
9+ run : |
10+ scripts/setup/setup.sh
Original file line number Diff line number Diff line change 1+ # TODO - Re-visit Trivy usage https://nhsd-jira.digital.nhs.uk/browse/CCM-15549
2+ # name: "Trivy IaC Scan"
3+ # description: "Scan Terraform IaC using Trivy"
4+ # runs:
5+ # using: "composite"
6+ # steps:
7+ # - name: "Trivy Terraform IaC Scan"
8+ # shell: bash
9+ # run: |
10+ # components_exit_code=0
11+ # modules_exit_code=0
12+ # asdf plugin add trivy || true
13+ # asdf install trivy || true
14+ # ./scripts/terraform/trivy-scan.sh --mode iac ./infrastructure/terraform/components || components_exit_code=$?
15+ # ./scripts/terraform/trivy-scan.sh --mode iac ./infrastructure/terraform/modules || modules_exit_code=$?
16+
17+ # if [ $components_exit_code -ne 0 ] || [ $modules_exit_code -ne 0 ]; then
18+ # echo "Trivy misconfigurations detected."
19+ # exit 1
20+ # fi
Original file line number Diff line number Diff line change 1+ # TODO - Re-visit Trivy usage https://nhsd-jira.digital.nhs.uk/browse/CCM-15549
2+ # name: "Trivy Package Scan"
3+ # description: "Scan project packages using Trivy"
4+ # runs:
5+ # using: "composite"
6+ # steps:
7+ # - name: "Trivy Package Scan"
8+ # shell: bash
9+ # run: |
10+ # exit_code=0
11+ # asdf plugin add trivy || true
12+ # asdf install trivy || true
13+ # ./scripts/terraform/trivy-scan.sh --mode package . || exit_code=$?
14+
15+ # if [ $exit_code -ne 0 ]; then
16+ # echo "Trivy has detected package vulnerabilities. Please refer to https://nhsd-confluence.digital.nhs.uk/spaces/RIS/pages/1257636917/PLAT-KOP-012+-+Trivy+Pipeline+Vulnerability+Scanning+Exemption"
17+ # exit 1
18+ # fi
You can’t perform that action at this time.
0 commit comments