ci: remover linter e enviar para sonarqube
This commit is contained in:
@@ -24,12 +24,7 @@ jobs:
|
||||
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
|
||||
trivy image --severity HIGH,CRITICAL nginx:alpine
|
||||
|
||||
# 3. LINTING & QUALIDADE (Usando uma imagem Docker oficial com HTMLHint já instalado)
|
||||
- name: HTML Linter (Docker)
|
||||
run: |
|
||||
docker run --rm -v ${{ github.workspace }}:/web tmknom/htmlhint htmlhint /web/index.html
|
||||
|
||||
# 4. SAST - Análise de Código com SonarQube
|
||||
# 3. SAST - Análise de Código com SonarQube
|
||||
- name: SonarQube Analysis
|
||||
run: |
|
||||
curl -sL https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-5.0.1.3006-linux.zip -o sonar-scanner.zip
|
||||
@@ -47,7 +42,7 @@ jobs:
|
||||
- name: Checkout Code
|
||||
uses: actions/checkout@v3
|
||||
|
||||
# 5. DEPLOY ATÓMICO E HARDENING
|
||||
# 4. DEPLOY ATÓMICO E HARDENING
|
||||
- name: Hardened Deploy
|
||||
run: |
|
||||
docker exec website-test-backend tar -czf /tmp/index_backup.tar.gz -C /usr/share/nginx/html index.html || true
|
||||
@@ -57,7 +52,7 @@ jobs:
|
||||
docker exec website-test-backend chmod 444 /usr/share/nginx/html/index.html
|
||||
curl --silent --show-error --fail http://localhost:80 || exit 1
|
||||
|
||||
# 6. AUDITORIA DE DEPLOY
|
||||
# 5. AUDITORIA DE DEPLOY
|
||||
- name: Slack/Discord Notification
|
||||
if: always()
|
||||
run: |
|
||||
|
||||
Reference in New Issue
Block a user