mia-platform / crud-service / 11406881359

97%

push

github

ci(build): generating SBOM and signing docker images (#399)

* docs: fix broken link in README file

* feat: update ignore files

Update gitignore to use templating from gitignore.io and update dockerignore
to follow the folder and files order

* feat: add devcontainer

* feat: update Dockerfile

- add support for multiarch
- follow best practice for CMD directive
- remove redundant LABEL directive, it will be set via release automation
- pin images with shasum to know exactly what version is used (node image are rebuilt for os updates)

* feat: update dependabot configs

* ci: update cache-cleanup action to latest version

* ci: update checks workflow to pinning versions and using nvmrc as node version source

* ci: add codeql workflow

* ci: add dependency review workflow

* ci: update perf tests workflow to pinning versions and using nvmrc as node version source

* ci: update tests workflow to pinning versions and using nvmrc as node version source

* ci: remove whitespaces

* ci: add steps for generating sbom and signing docker images

* ci: use nexus tag for generating sbom

* ci: fix remove unused security_checks_token

* ci: fix missing comment marker for coverall step

* ci: fix tag regex and missing comment

* build: weird trick for allowing exec CMD in Dockerfile

* build: the weird trick wasn't really working :cry:

1451 of 1561 branches covered (92.95%)

Branch coverage included in aggregate %.

9293 of 9495 relevant lines covered (97.87%)

7892.35 hits per line