Smart-sheet test added

.github/workflows/create-slackbot-docker-image.yml

@@ -0,0 +1,135 @@
+name: Create Docker Image for Slackbot
+on:
+  workflow_dispatch:
+    inputs:
+      quay_registry_username:
+        description: 'Username'
+        required: true
+      quay_registry_password:
+        description: 'Password'
+        required: true
+      tag_major_version:
+        description: 'Major Version'
+        required: true
+        default: "1"
+      tag_minor_version:
+        description: 'Minor Version'
+        required: true
+        default: "1"
+      push_when_critical_errors_in_scan:
+        description: 'Push when Critical Errors in Scan'
+        required: true
+        default: "false"
+        type: choice
+        options:
+          - "true"
+          - "false"
+permissions:
+  contents: read
+  security-events: write          
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    env:
+      IMAGE_NAME: "quay.io/ocp_sustaining_engineering/slack_backend"
+      TAG_PATCH_VERSION: 0
+      SLACKBOT_IMAGE_REPO_URL: "https://quay.io/api/v1/repository/ocp_sustaining_engineering/slack_backend/tag/"
+    steps:
+    - name: Validate inputs
+      run: |
+        if ! [[ "${{ inputs.tag_major_version }}" =~ ^[0-9]+$ ]]; then
+          echo "Major version must be numeric"
+          exit 1
+        fi
+        if ! [[ "${{ inputs.tag_minor_version }}" =~ ^[0-9]+$ ]]; then
+          echo "Minor version must be numeric"
+          exit 1
+        fi
+    - name: Checkout code
+      uses: actions/checkout@v4
+    - name: Get Next Tag Version
+      uses: nick-fields/retry@v2
+      with:
+        timeout_minutes: 5
+        max_attempts: 3
+        retry_on: error
+        command: |
+          PAGE=1
+          LIMIT=50
+          HAS_MORE=true
+          ALL_TAGS='[]'
+          FILTER_PARAMS="&onlyActiveTags=1&filter_tag_name=like:${{ inputs.tag_major_version }}.${{ inputs.tag_minor_version }}."
+          while [ "$HAS_MORE" = true ]; do
+            echo "Fetching page $PAGE..."
+            PAGE_AND_LIMIT_PARAMS="?limit=$LIMIT&page=$PAGE"
+            if ! JSON_RESPONSE=$(curl -s -f --max-time 300 "$SLACKBOT_IMAGE_REPO_URL$PAGE_AND_LIMIT_PARAMS$FILTER_PARAMS"); then
+              echo "Failed to fetch tags from API"
+              exit 1
+            fi
+            TAGS=$(echo "$JSON_RESPONSE" | jq '.tags')
+            ALL_TAGS=$(jq -s 'add' <(echo "$ALL_TAGS") <(echo "$TAGS"))
+            HAS_MORE=$(echo "$JSON_RESPONSE" | jq '.has_additional')
+            PAGE=$((PAGE + 1))
+          done
+          COUNT_EXISTING=$(echo "$ALL_TAGS" | jq '. | length')
+          if [ "$COUNT_EXISTING" -eq 0 ]; then
+            NEXT_TAG_VERSION="${{ inputs.tag_major_version }}.${{ inputs.tag_minor_version }}.${{ env.TAG_PATCH_VERSION }}"
+          else
+            MAX_VER=$(echo "$ALL_TAGS" | jq -r '.[].name'| sort -V | tail -n1)
+            IFS='.' read -r MAJOR MINOR PATCH <<< "$MAX_VER"
+            NEW_PATCH=$((PATCH + 1))
+            NEXT_TAG_VERSION="${{ inputs.tag_major_version }}.${{ inputs.tag_minor_version }}.${NEW_PATCH}"
+          fi
+          echo "NEXT_TAG_VERSION=$NEXT_TAG_VERSION" >> $GITHUB_ENV
+          echo "Computed image version: $NEXT_TAG_VERSION"
+    - name: Login to Quay.io
+      id: login
+      run: |
+        set -e
+        QUAY_PASSWORD=$(jq -r '.inputs.quay_registry_password' $GITHUB_EVENT_PATH)
+        echo ::add-mask::$QUAY_PASSWORD
+        QUAY_USERNAME=$(jq -r '.inputs.quay_registry_username' $GITHUB_EVENT_PATH)
+        echo ::add-mask::$QUAY_USERNAME
+        echo ":closed_lock_with_key: Logging in to quay.io..."
+        echo "$QUAY_PASSWORD" | docker login quay.io -u "$QUAY_USERNAME" --password-stdin
+    - name: Build Docker image locally
+      uses: docker/build-push-action@v5
+      with:
+        context: .
+        push: false
+        tags: ${{ env.IMAGE_NAME }}:${{ env.NEXT_TAG_VERSION }}
+        load: true
+      timeout-minutes: 30
+    - name: Trivy scan gating
+      run: |
+        if [ "$PUSH_ON_CRITICAL" == "true" ]; then
+          EXIT_CODE=0
+        else
+          EXIT_CODE=1
+        fi
+
+        echo "Using Trivy exit code: $EXIT_CODE"
+
+        docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
+          aquasec/trivy:latest image \
+          --severity CRITICAL \
+          --format table \
+          --exit-code $EXIT_CODE \
+          ${{ env.IMAGE_NAME }}:${{ env.NEXT_TAG_VERSION }}
+      env:
+        PUSH_ON_CRITICAL: ${{ inputs.push_when_critical_errors_in_scan }}
+
+    - name: Push Docker image to Quay
+      uses: docker/build-push-action@v5
+      with:
+        context: .
+        push: true
+        tags: ${{ env.IMAGE_NAME }}:${{ env.NEXT_TAG_VERSION }}
+
+    - name: Clean up
+      if: ${{ always() }}
+      run: |
+        echo ":wastebasket: Removing temporary file etc"
+        rm -f /home/runner/.docker/config.json
+        docker logout quay.io || true
+

.github/workflows/pr-checks.yaml

@@ -41,26 +41,47 @@ jobs:
             echo "✅ No .env files detected."
           fi
 
-  # run-entrypoint:
-  #   name: Test Python Entrypoint
-  #   runs-on: ubuntu-latest
+  tests:
+    name: Tests
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get changed files
+        id: changed
+        run: |
+          echo "CHANGED=$(git diff --name-only origin/${{ github.base_ref }} | tr '\n' ' ')" >> $GITHUB_ENV
+
+      - name: Setup python requirements
+        if: contains(env.CHANGED, 'sdk/') || contains(env.CHANGED, 'tests/') || contains(env.CHANGED, 'slack_handlers/') || contains(env.CHANGED, 'api/') || contains(env.CHANGED, '/')
+        run: |
+          python -m pip install --upgrade pip
+          pip install -r requirements.txt
 
-  #   steps:
-  #     - name: Checkout Code
-  #       uses: actions/checkout@v3
+      - name: Test SDK AWS
+        if: contains(env.CHANGED, 'sdk/aws/') || contains(env.CHANGED, 'sdk/tests/')
+        run: |
+          python -m pytest sdk/tests/test_runner.py::TestRunner::test_aws
 
-  #     - name: Set up Python
-  #       uses: actions/setup-python@v4
-  #       with:
-  #         python-version: 3.12
+      - name: Test SDK OpenStack
+        if: contains(env.CHANGED, 'sdk/openstack/') || contains(env.CHANGED, 'sdk/tests/')
+        run: |
+          python -m pytest sdk/tests/test_runner.py::TestRunner::test_openstack
 
-  #     - name: Install Dependencies
-  #       run: |
-  #         python -m pip install --upgrade pip
-  #         # Install project dependencies 
-  #         pip install -r requirements.txt
+      - name: Test SDK Tools
+        if: contains(env.CHANGED, 'sdk/tools/') || contains(env.CHANGED, 'sdk/tests/')
+        run: |
+          python -m pytest sdk/tests/test_runner.py::TestRunner::test_tools
 
-  #     - name: Run Entrypoint 
-  #       run: |
-  #          export $(grep -v '^#' vars | xargs)
-  #          python -c "import slack_main" || exit 1
+      - name: Test Slack Handlers
+        if: (contains(env.CHANGED, 'tests/') && !contains(env.CHANGED, 'sdk/')) || contains(env.CHANGED, 'slack_handlers/')
+        run: |
+          python -m pytest tests/test_runner.py::TestRunner::test_handlers
+
+      - name: Test Slack Commands
+        run: |
+          python -m pytest tests/test_runner.py::TestRunner::test_slack_commands

.gitignore

@@ -1,3 +1,21 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+
+# Unit test / coverage reports
+.pytest_cache/
+
+# Environments
 .env
+.venv
+env/
+venv/
+
+# IDE settings
+.idea/
+.vscode/
+
+# Ruff stuff:
 .ruff_cache/
-__pycache__/
+
+# Mac OS
+.DS_Store

CODEOWNERS

@@ -0,0 +1 @@
+* @prabhapa

Dockerfile

@@ -1,10 +1,24 @@
-
-FROM python:3.9-slim
+FROM python:3.12-alpine
 
 WORKDIR /app
 
-COPY . /app
+# Copy files and directories separately to ensure proper structure
+COPY requirements.txt config.py slack_main.py /app/
+COPY sdk /app/sdk/
+COPY slack_handlers /app/slack_handlers/
+
+# Install build dependencies, upgrade security-critical packages, then install Python packages
+RUN apk add --no-cache --virtual .build-deps gcc musl-dev linux-headers python3-dev \
+    && apk upgrade libcrypto3 libssl3 sqlite-libs \
+    && pip install --no-cache-dir -r requirements.txt \
+    && apk del .build-deps
+
+# Verify sqlite-libs version (for security audit)
+RUN apk info sqlite-libs && echo "✅ sqlite-libs version verified"
 
-RUN pip install --no-cache-dir -r requirements.txt
+# Remove sqlite binary tools (sqlite-libs must remain as Python dependency)
+# Note: sqlite-libs cannot be removed from Alpine Python - it's a core Python dependency
+RUN apk del sqlite || true
 
-CMD ["python", "slack_main.py"]
+# Run the app
+CMD ["python", "slack_main.py"]