cdxgen-fork/.github/workflows/dockertests.yml at master · amuravski/cdxgen-fork · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
name: docker tests

on:
  pull_request:
    paths:
      - '.github/workflows/dockertests.yml'
      - '.pnpmfile.cjs'
      - 'bin/**'
      - 'data/**'
      - 'index.cjs'
      - 'lib/**'
      - 'package.json'
      - 'pnpm-lock.yaml'
      - '!**.test.js'
  workflow_dispatch:
concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

# https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
permissions: {}

jobs:
  linux-tests:
    strategy:
      fail-fast: true
      matrix:
        os: ['ubuntu-24.04', 'ubuntu-24.04-arm']
        node-version: ['24.3']
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
      - name: Use Node.js ${{ matrix.node-version }}
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version: ${{ matrix.node-version }}
      - name: npm install, build and test
        run: |
          npm install --global corepack@latest
          corepack enable
          corepack pnpm install --config.strict-dep-builds=true --package-import-method copy
          corepack pnpm test
          mkdir -p bomresults
        env:
          CI: true
          CDXGEN_TEMP_DIR: ${{ runner.temp }}/cdxgen-dockertests
      - name: dockertests
        if: matrix.os == 'ubuntu-24.04'
        run: |
          bin/cdxgen.js ubuntu:latest -t docker -o bomresults/bom-ubuntu.json --fail-on-error
          docker rmi ubuntu:latest
          bin/cdxgen.js alpine:latest -t docker -o bomresults/bom-alpine.json --fail-on-error
          docker rmi alpine:latest
          bin/cdxgen.js almalinux:9.4-minimal -t docker -o bomresults/bom-almalinux.json --fail-on-error
          docker rmi almalinux:9.4-minimal
          bin/cdxgen.js phpmyadmin@sha256:1092481630056189e43cc0fe66fd01defcc9334d78ab4611b22f65e9a39869bd -o bomresults/bom-phpmyadmin.json --fail-on-error
          docker rmi phpmyadmin@sha256:1092481630056189e43cc0fe66fd01defcc9334d78ab4611b22f65e9a39869bd
          bin/cdxgen.js shiftleft/scan-slim -o bomresults/bom-scanslim.json -t container --fail-on-error
          docker rmi shiftleft/scan-slim
          bin/cdxgen.js redmine@sha256:a5c5f8a64a0d9a436a0a6941bc3fb156be0c89996add834fe33b66ebeed2439e -o bomresults/bom-redmine.json --fail-on-error
          docker rmi redmine@sha256:a5c5f8a64a0d9a436a0a6941bc3fb156be0c89996add834fe33b66ebeed2439e
          bin/cdxgen.js rocket.chat@sha256:379f7afa0e67497c363ac9a9b3e7e6a6d31deee228233307c987e4a0c68b28e6 -o bomresults/bom-rocket.json --fail-on-error
          docker rmi rocket.chat@sha256:379f7afa0e67497c363ac9a9b3e7e6a6d31deee228233307c987e4a0c68b28e6
          bin/cdxgen.js sonarqube@sha256:7c0edcb99c964984db6d24330db33bb12de1e8ae0d5974d77640b1efea1483d1 -o bomresults/bom-sonar.json --fail-on-error
          docker rmi sonarqube@sha256:7c0edcb99c964984db6d24330db33bb12de1e8ae0d5974d77640b1efea1483d1
          bin/cdxgen.js zookeeper@sha256:5bf00616677db5ef57d8a2da7c5dadf67f1a6be54b0c33a79be3332c9c80aeb6 -o bomresults/bom-zoo.json --fail-on-error
          docker rmi zookeeper@sha256:5bf00616677db5ef57d8a2da7c5dadf67f1a6be54b0c33a79be3332c9c80aeb6
          docker pull shiftleft/scan-slim:latest
          docker save shiftleft/scan-slim:latest -o /tmp/scanslim.tar
          docker rmi shiftleft/scan-slim:latest
          bin/cdxgen.js /tmp/scanslim.tar -o bomresults/bom-scanarch.json --fail-on-error
          rm /tmp/scanslim.tar
          ls -ltr bomresults
      - name: dockertests arm
        if: matrix.os == 'ubuntu-24.04-arm'
        run: |
          bin/cdxgen.js ubuntu:latest -t docker -o bomresults/bom-ubuntu.json --fail-on-error
          docker rmi ubuntu:latest
          bin/cdxgen.js alpine:latest -t docker -o bomresults/bom-alpine.json --fail-on-error
          docker rmi alpine:latest
          bin/cdxgen.js almalinux:9.4-minimal -t docker -o bomresults/bom-almalinux.json --fail-on-error
          docker rmi almalinux:9.4-minimal
          ls -ltr bomresults
  linux-dockertar-tests:
    strategy:
      fail-fast: true
      matrix:
        os: ['ubuntu-24.04', 'ubuntu-24.04-arm']
        node-version: ['24.3']
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
      - name: Use Node.js ${{ matrix.node-version }}
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version: ${{ matrix.node-version }}
      - name: npm install, build and test
        run: |
          npm install --global corepack@latest
          corepack enable
          corepack pnpm install --config.strict-dep-builds=true --package-import-method copy
          corepack pnpm test
          mkdir -p bomresults repotests
        env:
          CI: true
      - name: dockertests
        if: matrix.os == 'ubuntu-24.04'
        run: |
          docker pull ubuntu:latest
          docker save -o /tmp/ubuntu.tar ubuntu:latest
          docker rmi ubuntu:latest
          bin/cdxgen.js /tmp/ubuntu.tar -t docker -o bomresults/bom-ubuntu.tar.json --fail-on-error
          docker pull alpine:latest
          docker save -o /tmp/alpine.tar alpine:latest
          docker rmi alpine:latest
          bin/cdxgen.js /tmp/alpine.tar -t docker -o bomresults/bom-alpine.tar.json --fail-on-error
          ls -ltr bomresults
  os-tests:
    strategy:
      fail-fast: true
      matrix:
        node-version: ['24.3']
        os: [ubuntu-24.04, ubuntu-24.04-arm]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
      - name: Use Node.js ${{ matrix.node-version }}
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version: ${{ matrix.node-version }}
      - name: npm install, build and test
        run: |
          npm install --global corepack@latest
          corepack enable
          corepack pnpm install --config.strict-dep-builds=true --package-import-method copy
          mkdir -p bomresults
        env:
          CI: true
      - name: ostests
        run: |
          bin/cdxgen.js -t os -o bomresults/bom-os.json --fail-on-error
      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        if: matrix.os == 'ubuntu-24.04-arm'
        with:
          name: bomresults-os
          path: bomresults

  win-tests:
    runs-on: windows-latest

    strategy:
      fail-fast: true
      matrix:
        node-version: ['24.3']
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
      - name: Use Node.js ${{ matrix.node-version }}
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version: ${{ matrix.node-version }}
      - name: npm install, build
        run: |
          npm install --global corepack@latest
          corepack enable
          corepack pnpm install --config.strict-dep-builds=true --package-import-method copy
          mkdir bomresults
        env:
          CI: true
      - name: wintests
        run: |
          node bin/cdxgen.js -t os -o bomresults/bom-win.json --fail-on-error
          dir bomresults
      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: bomresults-win
          path: bomresults