Trigger pipeline rebuild

.gitea/workflows/deploy.yml

@@ -1,7 +1,9 @@
-name: "DevSecOps Pipeline"
+name: "DevSecOps Enterprise Pipeline"
 on:
   push:
     branches: [ main ]
+  pull_request:
+    branches: [ main ]
 
 jobs:
   security-gate-and-deploy:
@@ -77,12 +79,19 @@ jobs:
           echo ">>> Atualizando Produção..."
           docker rm -f portal-corporativo || true
           docker run -d -p 3000:3000 --name portal-corporativo apex-solutions:latest
-          sleep 3
+          
-          curl --silent --show-error --fail http://localhost:3000 || exit 1
+          echo ">>> Aguardando arranque do Node.js..."
+          sleep 5
+          
+          echo ">>> Logs do Contentor (para despiste de erros):"
+          docker logs portal-corporativo
+          
+          echo ">>> A testar integridade do servidor (Internamente via wget)..."
+          docker exec portal-corporativo wget --spider -S http://localhost:3000
           
           echo ">>> Publicando Relatório ZAP no servidor Web..."
           docker cp qatests/report.html portal-corporativo:/usr/src/app/frontend/zap-report.html || true
-
+          
       - name: 7. Archive ZAP Report (Gitea Artifacts)
         if: always()
         uses: actions/upload-artifact@v3

README.md

@@ -1,2 +0,0 @@
-# Website Secure - Teste DevSecOps
-Este é um teste para validar a proteção da branch main e a orquestração da pipeline. 

package.json

@@ -0,0 +1,20 @@
+{
+  "name": "website-secure",
+  "version": "1.0.0",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "jest"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://gitea.each-cs.com/pm/website-secure.git"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "type": "commonjs",
+  "devDependencies": {
+    "jest": "^30.4.2"
+  }
+}

tests/core.test.js

@@ -0,0 +1 @@
+test('Pipeline flow: 1 + 1 deve ser 2', () => { expect(1 + 1).toBe(2); });