2 Commits

Author SHA1 Message Date
pm 139ef63129 test ci/cd titulo v3
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Successful in 1m31s
2026-06-13 15:15:37 +01:00
pm 6e36250d69 test ci/cd titulo v2
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Successful in 1m30s
2026-06-13 15:04:38 +01:00
2 changed files with 4 additions and 19 deletions
+3 -18
View File
@@ -46,7 +46,6 @@ jobs:
-Dsonar.javascript.lcov.reportPaths=coverage/lcov.info -Dsonar.javascript.lcov.reportPaths=coverage/lcov.info
- name: 5. Dynamic Security Scan (OWASP ZAP) - name: 5. Dynamic Security Scan (OWASP ZAP)
# REMOVIDO o "if: github.event_name == 'push'". Agora o ZAP corre SEMPRE (nos PRs e nos Merges)!
run: | run: |
echo ">>> 1. Limpeza profunda do ambiente..." echo ">>> 1. Limpeza profunda do ambiente..."
docker rm -f apex-sandbox zap-scanner || true docker rm -f apex-sandbox zap-scanner || true
@@ -96,17 +95,7 @@ jobs:
exit 0 exit 0
fi fi
- name: 6.1. Enviar Relatório ZAP para o Servidor (SCP) - name: 6. Deploy em Produção (SSH)
if: github.event_name == 'push'
uses: appleboy/scp-action@master
with:
host: ${{ secrets.SSH_HOST }}
username: ${{ secrets.SSH_USER }}
key: ${{ secrets.SSH_PRIVATE_KEY }}
source: "qatests/report.html"
target: "/tmp"
- name: 6.2. Deploy em Produção (SSH)
if: github.event_name == 'push' if: github.event_name == 'push'
uses: appleboy/ssh-action@master uses: appleboy/ssh-action@master
with: with:
@@ -114,6 +103,8 @@ jobs:
username: ${{ secrets.SSH_USER }} username: ${{ secrets.SSH_USER }}
key: ${{ secrets.SSH_PRIVATE_KEY }} key: ${{ secrets.SSH_PRIVATE_KEY }}
script: | script: |
set -e
echo ">>> 1. A navegar para a pasta do projeto no servidor..." echo ">>> 1. A navegar para a pasta do projeto no servidor..."
cd /storage/docker/website-secure cd /storage/docker/website-secure
@@ -121,18 +112,12 @@ jobs:
git pull origin main git pull origin main
echo ">>> 3. A compilar a imagem Docker de Produção..." echo ">>> 3. A compilar a imagem Docker de Produção..."
# Compilamos a imagem com a tag :prod para ficar bem identificada
docker build -f backend/Dockerfile -t apex-solutions:prod . docker build -f backend/Dockerfile -t apex-solutions:prod .
echo ">>> 4. A substituir o contentor em execução..." echo ">>> 4. A substituir o contentor em execução..."
# Removemos o contentor antigo e subimos o novo na porta 3000
docker rm -f portal-corporativo || true docker rm -f portal-corporativo || true
docker run -d -p 3000:3000 --name portal-corporativo --restart unless-stopped apex-solutions:prod docker run -d -p 3000:3000 --name portal-corporativo --restart unless-stopped apex-solutions:prod
echo ">>> 5. A publicar o relatório de segurança transparente..."
sleep 5
docker cp /tmp/qatests/report.html portal-corporativo:/usr/src/app/frontend/zap-report.html || true
echo "✅ Deploy concluído com sucesso! A aplicação está no ar." echo "✅ Deploy concluído com sucesso! A aplicação está no ar."
- name: 7. Archive ZAP Report - name: 7. Archive ZAP Report
+1 -1
View File
@@ -33,7 +33,7 @@
<div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-24 lg:py-32"> <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-24 lg:py-32">
<h1 class="text-4xl tracking-tight font-extrabold text-gray-900 sm:text-5xl md:text-6xl"> <h1 class="text-4xl tracking-tight font-extrabold text-gray-900 sm:text-5xl md:text-6xl">
<span class="block">Innovative Solutions for</span> <span class="block">Innovative Solutions for</span>
<span class="block text-blue-600">Modern Busines - Test CI/CD</span> <span class="block text-blue-600">Modern website-secure</span>
</h1> </h1>
<p class="mt-6 max-w-2xl text-lg text-gray-500 leading-relaxed"> <p class="mt-6 max-w-2xl text-lg text-gray-500 leading-relaxed">
At Apex Solutions, we deliver high-quality business consulting, technology services, and strategic insights. We help organizations across the globe achieve their goals through operational excellence and digital transformation. At Apex Solutions, we deliver high-quality business consulting, technology services, and strategic insights. We help organizations across the globe achieve their goals through operational excellence and digital transformation.