From 54c4e6ff9717a3ce20c35c12dd87dc5294dcad31 Mon Sep 17 00:00:00 2001 From: Alexandre Teles Date: Sun, 28 Aug 2022 20:10:28 -0300 Subject: [PATCH] Remove dump file and add workflow --- .github/workflows/main.yml | 62 +++++++++++++++++++++++++++++++++++++ dump.rdb | Bin 92 -> 0 bytes 2 files changed, 62 insertions(+) create mode 100644 .github/workflows/main.yml delete mode 100644 dump.rdb diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml new file mode 100644 index 0000000..015835f --- /dev/null +++ b/.github/workflows/main.yml @@ -0,0 +1,62 @@ +name: Main build + +on: + push: + branches: [ master ] + pull_request: + branches: [ master ] + schedule: + - cron: '24 9 * * 6' + workflow_dispatch: + +jobs: + build: + runs-on: ubuntu-latest + steps: + - name: Checkout Dockerfile + id: checkout + uses: actions/checkout@v2 + + - name: Setup QEMU + id: qemu + uses: docker/setup-qemu-action@v1 + with: + image: tonistiigi/binfmt:latest + platforms: all + + - name: Setup Docker Buildx + id: buildx + uses: docker/setup-buildx-action@v1 + + - name: Login to DockerHub + id: login + uses: docker/login-action@v1 + with: + username: ${{ secrets.DOCKERHUB_USERNAME }} + password: ${{ secrets.DOCKERHUB_TOKEN }} + + - name: Build and push Docker image + id: build + uses: docker/build-push-action@v2 + with: + build-args: GH_TOKEN=${{ secrets.GH_TOKEN }} + context: . + file: ./Dockerfile + platforms: linux/amd64,linux/arm64/v8,linux/arm/v7,linux/ppc64le,linux/s390x + push: true + tags: | + alexandreteles/revanced-releases-api:latest + + - name: Run Trivy vulnerability scanner + uses: aquasecurity/trivy-action@master + with: + image-ref: 'docker.io/alexandreteles/revanced-releases-api:latest' + format: 'template' + template: '@/contrib/sarif.tpl' + output: 'trivy-results.sarif' + severity: 'CRITICAL,HIGH' + + - name: Upload Trivy scan results to GitHub Security tab + uses: github/codeql-action/upload-sarif@v1 + with: + sarif_file: 'trivy-results.sarif' \ No newline at end of file diff --git a/dump.rdb b/dump.rdb deleted file mode 100644 index da711949dd4699c9a6cb47d34b81bbcd8324bfc7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 92 zcmWG?b@2=~Ffg$E#aWb^l3A=