opensrp / opensrp-server-core / #147

78%

push

Github

Trivy, CodeQL and Dependabot integration (#601)

* Automated code scanning using CodeQL

* Trivy repository scan configuration

* Test directory creation

* Configure Fixed Java Version 👷

* Update GA Workflow Config File
- Configure cancellation for any previous Workflow runs

* Add Submodule Recursion CI Repository Checkout 👷
- Fixes error where properties file not found in the CI Pipeline

* Fix Unit Tests ✅

* Adjust cronjobednesday to run every Mon and Wed

* Update trivy-repo-scan configuration

* Upgrade Dependencies ⬆️ (#604)

* Bump up Postgres version⬆️

* Upgrade Spring Core version ⬆️

* Trivy, CodeQL and Dependabot security scanning configurations

Signed-off-by: Bonface Shisakha Asunga <basunga@ona.io>

* Update Trivy scanning configuration

Signed-off-by: Bonface Shisakha Asunga <basunga@ona.io>

* Update Trivy and CodeQL configuration

Signed-off-by: Bonface Shisakha Asunga <basunga@ona.io>

* Update dependencies

* Add Corresponding Hashcode Override
- Add Hashcode override to StrutureDetails class
- Add missing checks in Java Equals contract for override
- Unit tests

* Add scanning on v2 branches as well as modify scanning strategy to all PRs and push to `master` and `v2` branches

Signed-off-by: Bonface Shisakha Asunga <basunga@ona.io>

* Modify name of the Trivy repo scan

Signed-off-by: Bonface Shisakha Asunga <basunga@ona.io>

* Harmonize jackson-versions

* Upgrade org.postgresql:postgresql version to 42.5.0

* Reduce number of reviewers

* Update dependabot configurations

* Limit CodeQL analysis to v2 and master branches

Signed-off-by: Bonface Shisakha Asunga <basunga@ona.io>
Co-authored-by: Martin Ndegwa <mndegwa@ona.io>
Co-authored-by: Martin Ndegwa <ndegwamartin@users.noreply.github.com>
Co-authored-by: Ephraim Kigamba <ekigamba@ona.io>

5 of 5 new or added lines in 1 file covered. (100.0%)

7697 of 9927 relevant lines covered (77.54%)

0.78 hits per line