Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/01-lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -166,7 +166,7 @@ jobs:

steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🐍 Set up Python 3.12
if: |
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/02-security.yml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
steps:
# 0️⃣ Checkout source code with full history for secret scanning
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: 0 # Need full history to scan all commits

Expand All @@ -46,7 +46,7 @@ jobs:
steps:
# 0️⃣ Checkout source code with full history
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: 0 # Need full history for differential scanning

Expand All @@ -66,7 +66,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🔍 Scan Python dependencies (pyproject.toml, poetry.lock)
uses: aquasecurity/trivy-action@master
Expand All @@ -90,7 +90,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🔍 Scan Node dependencies (package.json, package-lock.json)
uses: aquasecurity/trivy-action@master
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/03-build-secure.yml
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ jobs:

steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🧹 Free Up Disk Space
run: |
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/04-pytest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ jobs:

# 1️⃣ Checkout source code
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

# 2️⃣ Setup Python environment
- name: 🐍 Set up Python
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/05-ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
test-isolation:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v5

- name: Set up Python
uses: actions/setup-python@v4
Expand Down Expand Up @@ -84,7 +84,7 @@ jobs:
EMBEDDING_MODEL: sentence-transformers/all-minilm-l6-v2
DATA_DIR: /tmp/test-data
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v5

- name: Set up Python
uses: actions/setup-python@v4
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/06-weekly-security-audit.yml
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ jobs:

steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🧹 Free Up Disk Space
run: |
Expand Down Expand Up @@ -122,7 +122,7 @@ jobs:
if: always()
steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 📥 Download Security Reports
uses: actions/download-artifact@v4
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/07-frontend-lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:
steps:
# 0️⃣ Checkout source code
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

# 1️⃣ Setup Node.js environment
- name: 📦 Setup Node.js
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/ai-issue-triage.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: 0

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/claude-code-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: 1

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/claude.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
actions: read
steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: 1

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/codespace-testing.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ jobs:

steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Setup GitHub CLI
run: |
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/deploy_code_engine.yml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
security-events: write
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
Expand Down Expand Up @@ -60,7 +60,7 @@ jobs:
security-events: write
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
Expand Down Expand Up @@ -89,7 +89,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up IBM Cloud CLI
uses: ibm-cloud/sdk-action@v1
Expand Down Expand Up @@ -131,7 +131,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up IBM Cloud CLI
uses: ibm-cloud/sdk-action@v1
Expand Down
16 changes: 8 additions & 8 deletions .github/workflows/deploy_complete_app.yml
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,7 @@
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up IBM Cloud CLI
run: |
Expand Down Expand Up @@ -146,7 +146,7 @@
security-events: write
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
Expand Down Expand Up @@ -178,7 +178,7 @@
security-events: write
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
Expand All @@ -197,7 +197,7 @@
file: ./frontend/Dockerfile.frontend
platforms: linux/amd64
push: true
tags: ${{ env.IBM_CLOUD_REGION }}.icr.io/${{ env.CR_NAMESPACE }}/${{ env.FRONTEND_APP_NAME }}:${{ github.sha }}

Check warning on line 200 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

200:121 [line-length] line too long (121 > 120 characters)
cache-from: type=gha
cache-to: type=gha,mode=max

Expand All @@ -210,12 +210,12 @@
security-events: write
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Run Trivy vulnerability scanner (Backend)
uses: aquasecurity/trivy-action@master
with:
image-ref: ${{ env.IBM_CLOUD_REGION }}.icr.io/${{ env.CR_NAMESPACE }}/${{ env.BACKEND_APP_NAME }}:${{ github.sha }}

Check warning on line 218 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

218:121 [line-length] line too long (125 > 120 characters)
format: 'sarif'
output: 'trivy-backend-results.sarif'

Expand All @@ -228,7 +228,7 @@
- name: Run Trivy vulnerability scanner (Backend - Table)
uses: aquasecurity/trivy-action@master
with:
image-ref: ${{ env.IBM_CLOUD_REGION }}.icr.io/${{ env.CR_NAMESPACE }}/${{ env.BACKEND_APP_NAME }}:${{ github.sha }}

Check warning on line 231 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

231:121 [line-length] line too long (125 > 120 characters)
format: 'table'
exit-code: '1'
severity: 'CRITICAL,HIGH'
Expand All @@ -242,12 +242,12 @@
security-events: write
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Run Trivy vulnerability scanner (Frontend)
uses: aquasecurity/trivy-action@master
with:
image-ref: ${{ env.IBM_CLOUD_REGION }}.icr.io/${{ env.CR_NAMESPACE }}/${{ env.FRONTEND_APP_NAME }}:${{ github.sha }}

Check warning on line 250 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

250:121 [line-length] line too long (126 > 120 characters)
format: 'sarif'
output: 'trivy-frontend-results.sarif'

Expand All @@ -260,18 +260,18 @@
- name: Run Trivy vulnerability scanner (Frontend - Table)
uses: aquasecurity/trivy-action@master
with:
image-ref: ${{ env.IBM_CLOUD_REGION }}.icr.io/${{ env.CR_NAMESPACE }}/${{ env.FRONTEND_APP_NAME }}:${{ github.sha }}

Check warning on line 263 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

263:121 [line-length] line too long (126 > 120 characters)
format: 'table'
exit-code: '1'
severity: 'CRITICAL,HIGH'

deploy-backend:
needs: [build-and-push-backend, security-scan-backend]
if: always() && (needs.security-scan-backend.result == 'success' || needs.security-scan-backend.result == 'skipped') && (github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'schedule' && inputs.deploy_after_build == true))

Check warning on line 270 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

270:121 [line-length] line too long (271 > 120 characters)
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up IBM Cloud CLI
run: |
Expand All @@ -281,7 +281,7 @@
- name: Deploy Backend to Code Engine
env:
IBM_CLOUD_API_KEY: ${{ secrets.IBM_CLOUD_API_KEY }}
IMAGE_URL: ${{ env.IBM_CLOUD_REGION }}.icr.io/${{ env.CR_NAMESPACE }}/${{ env.BACKEND_APP_NAME }}:${{ github.sha }}

Check warning on line 284 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

284:121 [line-length] line too long (125 > 120 characters)
APP_NAME: ${{ env.BACKEND_APP_NAME }}
IBM_CLOUD_REGION: ${{ env.IBM_CLOUD_REGION }}
IBM_CLOUD_RESOURCE_GROUP: ${{ vars.IBM_CLOUD_RESOURCE_GROUP || 'rag-modulo-deployment' }}
Expand Down Expand Up @@ -323,11 +323,11 @@

deploy-frontend:
needs: [build-and-push-frontend, security-scan-frontend]
if: always() && (needs.security-scan-frontend.result == 'success' || needs.security-scan-frontend.result == 'skipped') && (github.event_name == 'workflow_dispatch' || github.event_name == 'push' || (github.event_name == 'schedule' && inputs.deploy_after_build == true))

Check warning on line 326 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

326:121 [line-length] line too long (273 > 120 characters)
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up IBM Cloud CLI
run: |
Expand All @@ -337,7 +337,7 @@
- name: Deploy Frontend to Code Engine
env:
IBM_CLOUD_API_KEY: ${{ secrets.IBM_CLOUD_API_KEY }}
IMAGE_URL: ${{ env.IBM_CLOUD_REGION }}.icr.io/${{ env.CR_NAMESPACE }}/${{ env.FRONTEND_APP_NAME }}:${{ github.sha }}

Check warning on line 340 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

340:121 [line-length] line too long (126 > 120 characters)
APP_NAME: ${{ env.FRONTEND_APP_NAME }}
IBM_CLOUD_REGION: ${{ env.IBM_CLOUD_REGION }}
IBM_CLOUD_RESOURCE_GROUP: ${{ vars.IBM_CLOUD_RESOURCE_GROUP || 'rag-modulo-deployment' }}
Expand All @@ -354,7 +354,7 @@
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up IBM Cloud CLI
run: |
Expand All @@ -363,7 +363,7 @@

- name: Test Backend Health
run: |
BACKEND_URL=$(ibmcloud ce app get --name "${{ env.BACKEND_APP_NAME }}" --output json | jq -r '.status.url' | head -1)

Check warning on line 366 in .github/workflows/deploy_complete_app.yml

View workflow job for this annotation

GitHub Actions / YAML Lint

366:121 [line-length] line too long (127 > 120 characters)
if [ -n "$BACKEND_URL" ]; then
echo "Testing backend at: $BACKEND_URL/health"
if curl -f -s "$BACKEND_URL/health" > /dev/null; then
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dev-environment-ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ jobs:

steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/makefile-testing.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ jobs:

steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up Python
uses: actions/setup-python@v4
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/poetry-lock-check.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up Python
uses: actions/setup-python@v4
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pr-devcontainer-info.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ jobs:

steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Check Dev Container Configuration
id: check-devcontainer
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout code repository
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/terraform-ansible-validation.yml
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ jobs:

steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🐍 Set up Python 3.12
uses: actions/setup-python@v4
Expand Down Expand Up @@ -138,7 +138,7 @@ jobs:

steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🐍 Set up Python 3.12
uses: actions/setup-python@v4
Expand Down Expand Up @@ -237,7 +237,7 @@ jobs:

steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🐍 Set up Python 3.12
uses: actions/setup-python@v4
Expand Down Expand Up @@ -266,7 +266,7 @@ jobs:

steps:
- name: 📥 Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v5

- name: 🔍 Terraform Security Scan
run: |
Expand Down
Loading