Full Pipeline - Githubissues

githubuniverseworkshops / github-devsecops-fundamentals

GitHub DevSecOps Fundamentals workshop at GitHub Universe

https://githubuniverseworkshops.github.io/github-devsecops-fundamentals/

8 stars 2 forks source link

Full Pipeline #2

Closed ncalteen closed 11 months ago

ncalteen commented 11 months ago

This PR introduces a more fleshed-out DevSecOps pipeline to use as the "end state" for the workshop. From this, we can select the pieces to remove and have students add in themselves.

The major components are:

CodeQL Workflow
- A standard CodeQL workflow...
CI Workflow
- Builds and tests any Python in the repo (in this case, spins up a MKDocs site and verifies the URL can be reached)
- Builds a container image with the MKDocs site
- (Optional) Runs and tests the container
CD Workflow
- Deploys to GitHub Pages

igwejk commented 11 months ago

Let's resolve conflict together after the dry-run and then merge, thanks!

ncalteen commented 11 months ago

I had some additional items to add into this one that should help as well.

Python .devcontainer configuration
CI/CD workflows with container build/scan/test actions

github-actions[bot] commented 11 months ago

Test Results

1 tests 1 :heavy_check_mark: 5s :stopwatch: 1 suites 0 :zzz: 1 files 0 :x:

Results for commit 256e1227.

github-advanced-security[bot] commented 11 months ago

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.