Skip to content

DevSecOps

DevSecOps #11

Workflow file for this run

name: DevSecOps
on:
workflow_dispatch:
inputs:
testing:
type: choice
options:
- DevOps
- SAST/SCA
- DAST/IAST
required: true
jobs:
secret-leaks:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
with:
fetch-depth: 0
ref: ${{ github.head_ref }}
- name: trufflehog-actions-scan
uses: edplato/trufflehog-actions-scan@master
with:
scanArguments: "--regex --entropy=False --max_depth=5 --rules /regexes.json"
build:
runs-on: ubuntu-latest
needs: secret-leaks
steps:
- name: "npm build"
run: echo "Build complete"
test:
runs-on: ubuntu-latest
needs: build
steps:
- name: "Execute unit tests and smoke tests"
run: echo "Test complete"
package:
needs: test
runs-on: ubuntu-latest
steps:
- name: "Prepare Docker image"
run: echo "Image pushed"
deploy:
runs-on: ubuntu-latest
needs: package
steps:
- name: "Trigger deployment"
run: echo "Deployed successfully"