Skip to content

fix/sonar-issues

fix/sonar-issues #693

Workflow file for this run

name: Code PR Check
on:
push:
branches: ["main"]
paths:
- 'src/**'
- 'tests/**'
pull_request:
branches: ["main"]
paths:
- 'src/**'
- 'tests/**'
- '.github/workflows/code-pr-check.yml'
- '.github/actions/**'
- 'terraform/**'
- 'adr/**'
concurrency:
group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}'
cancel-in-progress: true
env:
DOTNET_VERSION: 8
SOLUTION_NAME: 'Dfe.EarlyYearsQualification.sln'
URL: http://127.0.0.1:5000
jobs:
build-app:
name: Build, check and run tests
runs-on: ubuntu-22.04
steps:
- name: Check out repository
uses: actions/checkout@v4
- name: Build web app
uses: ./.github/actions/build-dotnet-app
with:
dotnet_version: ${{ env.DOTNET_VERSION }}
solution_filename: ${{ env.SOLUTION_NAME }}
- name: Run CodeQL and dependency checks
uses: ./.github/actions/codeql-and-dependency-checks
if: github.event_name == 'pull_request'
- name: Run unit tests
uses: ./.github/actions/run-unit-tests
with:
solution_filename: ${{ env.SOLUTION_NAME }}
- name: Run app for testing
uses: ./.github/actions/run-app-for-testing
with:
url: ${{ env.URL }}
auth_secret: ${{ secrets.WEBAPP_E2E_ACCESS_KEY }}
- name: Run e2e tests
uses: ./.github/actions/run-e2e-tests
with:
url: ${{ env.URL }}
auth_secret: ${{ secrets.WEBAPP_E2E_ACCESS_KEY }}
- name: Run Accessibility tests
uses: ./.github/actions/run-accessibility-tests
with:
url: ${{ env.URL }}
auth_secret: ${{ secrets.WEBAPP_E2E_ACCESS_KEY }}
security-checks-local:
name: Run baseline security checks locally
runs-on: ubuntu-22.04
needs: build-app
steps:
- name: Check out repository
uses: actions/checkout@v4
- name: Run .Net Project
shell: bash
run: |
dotnet run --urls "http://localhost:5000" --project="src/Dfe.EarlyYearsQualification.Web" \
--UseMockContentful=true \
--ServiceAccess:IsPublic="true" &
- name: ZAP Scan
uses: zaproxy/[email protected]
with:
token: ${{ secrets.GITHUB_TOKEN }}
docker_name: 'ghcr.io/zaproxy/zaproxy:stable'
target: http://localhost:5000
allow_issue_writing: false
artifact_name: local_scan_dev