Merge pull request #10 from DevSecOpsSamples/develop

cdk build action
DevSecOpsSamples · Dec 22, 2022 · 24d6ea2 · 24d6ea2
2 parents 8f8a12e + 8425c0f
commit 24d6ea2
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 113 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -7,16 +7,28 @@ on:
   pull_request:
     types: [opened, synchronize, reopened]
 jobs:
-  docker-build:
+  build-cdk:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 18
+      - name: Build CDK
+        run: npm install && npm run build
+
+  build-docker:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
     - name: Build the Docker image
       run: cd app && docker build . -t sample-rest-api:$(date +%s)
+
   sonarqube:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: Set up JDK 11
@@ -37,6 +49,6 @@ jobs:
           restore-keys: ${{ runner.os }}-gradle
       - name: Build and analyze
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        run: ./gradlew build sonarqube --info
+        run: ./gradlew build sonarqube --info
diff --git a/apprunner-stack copy.ts b/apprunner-stack copy.ts
diff --git a/package.json b/package.json
@@ -17,7 +17,7 @@
     "jest": "^26.4.2",
     "ts-jest": "^26.2.0",
     "ts-node": "^9.0.0",
-    "typescript": "~3.9.7"
+    "typescript": "^4.9.4"
   },
   "dependencies": {
     "@types/js-yaml": "4.0.5",