ci: Auto update Github Action workflows

VirtoCommerce · Aug 9, 2024 · 4885bab · 4885bab
1 parent 4b69db2
commit 4885bab
Show file tree

Hide file tree

Showing 4 changed files with 43 additions and 19 deletions.
diff --git a/.github/workflows/platform-ci.yml b/.github/workflows/platform-ci.yml
@@ -1,5 +1,5 @@
-# v3.800.6
-# https://virtocommerce.atlassian.net/browse/VCST-915
+# v3.800.8
+# https://virtocommerce.atlassian.net/browse/VCST-1109
 name: Platform CI
 
 on:
@@ -22,6 +22,16 @@ on:
       - '**/cloudDeploy.json'
     branches: [ master, dev ]
 
+  pull_request:
+    paths-ignore:
+      - '.github/**'
+      - 'docs/**'
+      - 'build/**'
+      - 'README.md'
+      - 'LICENSE'
+      - '**/argoDeploy.json'
+      - '**/cloudDeploy.json'
+
 jobs:
   ci:
     if: ${{ github.actor != 'dependabot[bot]' &&
@@ -210,7 +220,7 @@ jobs:
       with:
         artifactUrl: ${{ steps.artifactUrl.outputs.DOCKER_URL }}
         repoOrg: ${{ github.repository_owner }}
-        downloadComment: 'Artifact URL:'
+        downloadComment: 'Image tag:'
 
     - name: Publish Github Release
       if: ${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/main' }}
@@ -286,7 +296,7 @@ jobs:
     needs: 'ci'
     if: ${{ ((github.ref == 'refs/heads/dev') && (github.event_name == 'push') && (needs.ci.outputs.run-e2e == 'true')) ||
         (github.event_name == 'workflow_dispatch')}}
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     with:
       katalonRepo: 'VirtoCommerce/vc-quality-gate-katalon'
       katalonRepoBranch: 'dev'
@@ -303,7 +313,7 @@ jobs:
   deploy-cloud:
     if: ${{ (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/dev') && github.event_name == 'push' }}
     needs: ci
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     with:
       releaseSource: platform
       platformVer: ${{ needs.ci.outputs.version }}
@@ -312,3 +322,17 @@ jobs:
       argoServer: 'argo.virtocommerce.cloud'
       matrix: '{"include":${{ needs.ci.outputs.matrix }}}'
     secrets: inherit
+
+  owasp-scan:
+    if: ${{ github.ref == 'refs/heads/dev' && github.event_name == 'push' }}
+    runs-on: ubuntu-latest
+    needs: 
+      - deploy-cloud
+    steps:
+      - name: OWASP ZAP Full Scan
+        uses: zaproxy/[email protected]
+        with:
+          token: ${{ secrets.REPO_TOKEN }}
+          target: 'https://vcptcore-dev.govirto.com'
+          cmd_options: '-a -d'
+          # allow_issue_writing: false
diff --git a/.github/workflows/platform-release-hotfix.yml b/.github/workflows/platform-release-hotfix.yml
@@ -1,5 +1,5 @@
-# v3.800.6
-# https://virtocommerce.atlassian.net/browse/VCST-915
+# v3.800.8
+# https://virtocommerce.atlassian.net/browse/VCST-1109
 name: Release hotfix
 
 on:
@@ -13,12 +13,12 @@ on:
 
 jobs:
   test:
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     secrets:
       sonarToken: ${{ secrets.SONAR_TOKEN }}
 
   build:
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     with:
       uploadPackage: 'true'
       uploadDocker: 'true'
@@ -47,7 +47,7 @@ jobs:
   publish-docker:
     needs:
       [build, get-metadata]
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     with:
       fullKey: ${{ needs.build.outputs.dockerFullKey }}
       shortKey: '${{ needs.build.outputs.dockerShortKey }}-'
@@ -61,7 +61,7 @@ jobs:
   publish-github-release:
     needs:
       [build, test, get-metadata]
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     with:
       fullKey: ${{ needs.build.outputs.packageFullKey }}
       changeLog: '${{ needs.get-metadata.outputs.changeLog }}'

diff --git a/.github/workflows/publish-nugets.yml b/.github/workflows/publish-nugets.yml
@@ -1,5 +1,5 @@
-# v3.800.6
-# https://virtocommerce.atlassian.net/browse/VCST-915
+# v3.800.8
+# https://virtocommerce.atlassian.net/browse/VCST-1109
 name: Publish nuget
 
 on:
@@ -13,12 +13,12 @@ on:
 
 jobs:
   test:
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     secrets:
       sonarToken: ${{ secrets.SONAR_TOKEN }}
 
   build:
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     with:
       uploadPackage: 'true'
       uploadDocker: 'false'
@@ -29,7 +29,7 @@ jobs:
   publish-nuget:
     needs:
       [build, test]
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     with:
       fullKey: ${{ needs.build.outputs.packageFullKey }}
       forceGithub: false

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -1,12 +1,12 @@
-# v3.800.6
-# https://virtocommerce.atlassian.net/browse/VCST-915
+# v3.800.8
+# https://virtocommerce.atlassian.net/browse/VCST-1109
 name: Release
 
 on:
   workflow_dispatch:
 
 jobs:
   release:
-    uses: VirtoCommerce/.github/.github/workflows/[email protected].6    
+    uses: VirtoCommerce/.github/.github/workflows/[email protected].8    
     secrets:
       envPAT: ${{ secrets.REPO_TOKEN }}