Build Agent and Upload To OSS #28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow will build a Java project with Maven | |
| # For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-maven | |
| name: Build Agent and Upload To OSS | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| paths-ignore: | |
| - '.github/**' | |
| - 'changes/**' | |
| - 'deploy/**' | |
| - '**.md' | |
| - '**.yml' | |
| - '**.xml' | |
| - 'LICENSE' | |
| - '.gitignore' | |
| schedule: | |
| - cron: '0 10 * * *' | |
| jobs: | |
| Cache-Dependencies: | |
| name: Cache dependencies | |
| if: github.repository == 'HXSecurity/DongTai-agent-java' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Set up JDK 1.8 | |
| uses: actions/setup-java@v1 | |
| with: | |
| java-version: 1.8 | |
| - name: Set up Maven | |
| uses: stCarolas/setup-maven@v4 | |
| with: | |
| maven-version: 3.2.5 | |
| - uses: actions/cache@v2 | |
| id: mvn-cache # use this to check for `cache-hit` (`steps.mvn-cache.outputs.cache-hit != 'true'`) | |
| with: | |
| path: ~/.m2 # !WARN does not work if running multiple node versions, instead use https://github.com/actions/cache/blob/master/examples.md#node---yarn | |
| key: ${{ runner.os }}-mvn-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-mvn- | |
| - name: Mvn Install | |
| if: steps.mvn-cache.outputs.cache-hit != 'true' | |
| run: mvn -B compile -Dmaven.test.skip=true | |
| Build-Agent: | |
| name: Build Java Agent | |
| if: github.event_name == 'pull_request' || github.event_name == 'schedule' | |
| runs-on: ubuntu-latest | |
| needs: [ Cache-Dependencies ] | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Set up JDK 1.8 | |
| uses: actions/setup-java@v1 | |
| with: | |
| java-version: 1.8 | |
| - name: Set up Maven | |
| uses: stCarolas/setup-maven@v4 | |
| with: | |
| maven-version: 3.2.5 | |
| - name: Restore dependencies from cache | |
| uses: actions/cache@v2 | |
| with: | |
| path: ~/.m2 | |
| key: ${{ runner.os }}-mvn-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-mvn- | |
| - name: Build DongTai-Java-Agent With Maven | |
| run: | | |
| mvn -version | |
| mvn -B package -Dmaven.test.skip=true | |
| - uses: shogo82148/actions-setup-mysql@v1 | |
| with: | |
| mysql-version: '8.0' | |
| auto-start: true | |
| root-password: yuhjnbGYUI | |
| user: test | |
| password: test | |
| - name: OpenRASP-Vulns-Test | |
| run: bash .github/workflows/scripts/openrasp-test.sh "OpenRASP" "${{ github.event_name }}-${{ github.run_number }}" | |
| - name: Benchmark-Vulns-Test | |
| run: bash .github/workflows/scripts/benchmark-test.sh "OWASP-Benchmark" "${{ github.event_name }}-${{ github.run_number }}" | |
| Upload-To-OSS: | |
| name: Upload To TEST OSS | |
| if: github.event_name == 'push' | |
| runs-on: ubuntu-latest | |
| needs: [ Cache-Dependencies ] | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Set up JDK 1.8 | |
| uses: actions/setup-java@v1 | |
| with: | |
| java-version: 1.8 | |
| - name: Set up Maven | |
| uses: stCarolas/setup-maven@v4 | |
| with: | |
| maven-version: 3.2.5 | |
| - name: Restore dependencies from cache | |
| uses: actions/cache@v2 | |
| with: | |
| path: ~/.m2 | |
| key: ${{ runner.os }}-mvn-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-mvn- | |
| - name: Build DongTai-Java-Agent With Maven | |
| run: | | |
| mvn -version | |
| mvn -B package -Dmaven.test.skip=true | |
| - uses: manyuanrong/setup-ossutil@v2.0 | |
| with: | |
| endpoint: "oss-cn-beijing.aliyuncs.com" | |
| access-key-id: ${{ secrets.OSS_KEY_ID }} | |
| access-key-secret: ${{ secrets.OSS_KEY_SECRET }} | |
| - run: | | |
| ossutil cp -rf dongtai-agent/target/dongtai-agent.jar oss://dongtai/agent_test/java/dongtai-agent.jar --meta x-oss-object-acl:public-read | |
| ossutil cp -rf dongtai-agent/src/main/resources/bin/ oss://dongtai/agent_test/java/ --meta x-oss-object-acl:public-read | |
| ossutil cp -rf dongtai-agent/target/dongtai-agent.jar oss://dongtai/agent_test/java/latest/dongtai-agent.jar --meta x-oss-object-acl:public-read | |
| ossutil cp -rf dongtai-agent/src/main/resources/bin/ oss://dongtai/agent_test/java/latest/ --meta x-oss-object-acl:public-read | |
| - name: Trigger Openapi Workflow | |
| uses: benc-uk/workflow-dispatch@v1 | |
| with: | |
| workflow: Deploy DongTai OpenAPI To AWS | |
| token: ${{ secrets.BIDAYA0_PAT_FOR_OPENAPI }} | |
| ref: main | |
| repo: HXSecurity/DongTai-openapi |