pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test ci/cd titulo v2
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Successful in 1m30s
Details

Browse Source
This commit is contained in:
pm
2026-06-13 15:04:38 +01:00
parent f7f382965c
commit 6e36250d69
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/deploy.yml
+3 -3
View File
@@ -46,7 +46,6 @@ jobs:
-Dsonar.javascript.lcov.reportPaths=coverage/lcov.info -Dsonar.javascript.lcov.reportPaths=coverage/lcov.info
- name: 5. Dynamic Security Scan (OWASP ZAP) - name: 5. Dynamic Security Scan (OWASP ZAP)
# REMOVIDO o "if: github.event_name == 'push'". Agora o ZAP corre SEMPRE (nos PRs e nos Merges)!
run: | run: |
echo ">>> 1. Limpeza profunda do ambiente..." echo ">>> 1. Limpeza profunda do ambiente..."
docker rm -f apex-sandbox zap-scanner || true docker rm -f apex-sandbox zap-scanner || true
@@ -114,6 +113,9 @@ jobs:
username: ${{ secrets.SSH_USER }} username: ${{ secrets.SSH_USER }}
key: ${{ secrets.SSH_PRIVATE_KEY }} key: ${{ secrets.SSH_PRIVATE_KEY }}
script: | script: |
# ADICIONADO: Cancela o deploy imediatamente se algum comando falhar!
set -e
echo ">>> 1. A navegar para a pasta do projeto no servidor..." echo ">>> 1. A navegar para a pasta do projeto no servidor..."
cd /storage/docker/website-secure cd /storage/docker/website-secure
@@ -121,11 +123,9 @@ jobs:
git pull origin main git pull origin main
echo ">>> 3. A compilar a imagem Docker de Produção..." echo ">>> 3. A compilar a imagem Docker de Produção..."
# Compilamos a imagem com a tag :prod para ficar bem identificada
docker build -f backend/Dockerfile -t apex-solutions:prod . docker build -f backend/Dockerfile -t apex-solutions:prod .
echo ">>> 4. A substituir o contentor em execução..." echo ">>> 4. A substituir o contentor em execução..."
# Removemos o contentor antigo e subimos o novo na porta 3000
docker rm -f portal-corporativo || true docker rm -f portal-corporativo || true
docker run -d -p 3000:3000 --name portal-corporativo --restart unless-stopped apex-solutions:prod docker run -d -p 3000:3000 --name portal-corporativo --restart unless-stopped apex-solutions:prod