From fd1d0ee01217f9fd3e85fecae705f532b806dd4f Mon Sep 17 00:00:00 2001 From: Vidyadevi Salunkhe <84471226+Vidyaaa24@users.noreply.github.com> Date: Tue, 20 Jun 2023 16:31:50 +0530 Subject: [PATCH 1/2] Create sast-and-package-prod.yml --- .github/workflows/sast-and-package-prod.yml | 52 +++++++++++++++++++++ 1 file changed, 52 insertions(+) create mode 100644 .github/workflows/sast-and-package-prod.yml diff --git a/.github/workflows/sast-and-package-prod.yml b/.github/workflows/sast-and-package-prod.yml new file mode 100644 index 00000000..39a8de7c --- /dev/null +++ b/.github/workflows/sast-and-package-prod.yml @@ -0,0 +1,52 @@ +name: Static Code Analysis and Packaging Prod +on: + push: + branches: [ "master","develop" ] + +jobs: + CodeQL: + runs-on: ubuntu-latest + permissions: + actions: read + contents: read + security-events: write + + strategy: + fail-fast: false + steps: + - name: Checkout code + uses: actions/checkout@v2 + - name: Setup JDK 8 + uses: actions/setup-java@v2 + with: + java-version: 8 + distribution: 'adopt' + - name: Initialize CodeQL + uses: github/codeql-action/init@v2 + with: + languages: Java + - name: Build with Maven + run: mvn clean install -Denvironment=prod + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2 + with: + languages: Java + + Packaging: + needs: codeql + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v3 + - name: Setup JDK 8 + uses: actions/setup-java@v2 + with: + java-version: 8 + distribution: 'adopt' + - name: Create WAR file + run: mvn -B package --file pom.xml + - name: Upload WAR file as artifact + uses: actions/upload-artifact@v2 + with: + name: Common-API + path: target/commonapi-v1.0.war From c8447c290ce7b3f7e97c9d0a50025ffd2f409cf8 Mon Sep 17 00:00:00 2001 From: Vidyadevi Salunkhe <84471226+Vidyaaa24@users.noreply.github.com> Date: Tue, 20 Jun 2023 16:33:25 +0530 Subject: [PATCH 2/2] Update sast-and-package-prod.yml --- .github/workflows/sast-and-package-prod.yml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/sast-and-package-prod.yml b/.github/workflows/sast-and-package-prod.yml index 39a8de7c..a365f808 100644 --- a/.github/workflows/sast-and-package-prod.yml +++ b/.github/workflows/sast-and-package-prod.yml @@ -14,19 +14,24 @@ jobs: strategy: fail-fast: false steps: + - name: Checkout code uses: actions/checkout@v2 + - name: Setup JDK 8 uses: actions/setup-java@v2 with: java-version: 8 distribution: 'adopt' + - name: Initialize CodeQL uses: github/codeql-action/init@v2 with: - languages: Java + languages: Java + - name: Build with Maven run: mvn clean install -Denvironment=prod + - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v2 with: @@ -36,13 +41,16 @@ jobs: needs: codeql runs-on: ubuntu-latest steps: + - name: Checkout code uses: actions/checkout@v3 + - name: Setup JDK 8 uses: actions/setup-java@v2 with: java-version: 8 distribution: 'adopt' + - name: Create WAR file run: mvn -B package --file pom.xml - name: Upload WAR file as artifact