edfe

.coderabbit.yaml

@@ -0,0 +1,15 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+early_access: false
+reviews:
+  profile: "assertive"
+  request_changes_workflow: true
+  high_level_summary: true
+  poem: true
+  review_status: true
+  collapse_walkthrough: false
+  auto_review:
+    enabled: true
+    drafts: false
+chat:
+  auto_reply: true

.github/workflows/branch-name-validator.yml

@@ -0,0 +1,36 @@
+name: Enforce Branch Naming Convention
+
+on:
+  push:
+    branches:
+      - "*"
+  pull_request:
+    branches:
+      - "*"
+
+jobs:
+  branch-name-check:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Check out repository
+      uses: actions/checkout@v4
+
+    - name: Enforce branch naming convention
+      run: |
+        # Get the branch name
+        branch_name=$(echo "${GITHUB_REF#refs/heads/}")
+
+        # Define the branch name pattern
+        branch_regex="^(master|develop|(HCMPRE|HCMPOST|HCMSUB)-[0-9]{3,}-[a-zA-Z0-9-]+)$"
+
+        # Check if the branch name matches the pattern
+        if [[ ! "$branch_name" =~ $branch_regex ]]; then
+          echo "Branch name '$branch_name' does not follow the required naming convention."
+          echo "Branch names must follow the pattern: (HCMPRE|HCMPOST|HCMSUB)-123-description"
+          exit 1
+        fi
+
+    - name: Success message
+      run: |
+        branch_name=$(echo "${GITHUB_REF#refs/heads/}")
+        echo "Branch name '$branch_name' follows the required naming convention: 'master', 'develop', or (HCMPRE|HCMPOST|HCMSUB)-123-description"

.github/workflows/buildWorkbenchUI.yml

@@ -0,0 +1,64 @@
+name: Digit Admin Console Build workflow
+on:
+  push:
+    branches:
+      - campaign
+    paths:
+      - 'micro-ui/web/micro-ui-internals/**'
+  pull_request:
+    branches:
+      - campaign
+  workflow_dispatch:
+jobs:
+  docker_image-build:
+    outputs:
+      run_job_digit_ui: ${{ steps.check_files.outputs.run_job_digit_ui }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 2
+      - name: Setup Docker
+        uses: docker/setup-buildx-action@v1
+      - name: check modified files
+        id: check_files
+        run: |
+          echo "=============== list modified files ==============="
+          git diff --name-only HEAD^ HEAD
+
+          echo "========== check paths of modified files =========="
+          git diff --name-only HEAD^ HEAD > files.txt
+          run_job_digit_ui=false
+          while IFS= read -r file
+          do
+            if [[ $file == micro-ui/* ]]; then
+              echo "This modified file is under the 'digit_ui' folder."
+              run_job_digit_ui=true
+            fi
+          done < files.txt
+
+          # Set the output based on whether the job should run
+          echo "::set-output name=run_job_digit_ui::$run_job_digit_ui"
+          echo "ACTION_NUMBER=${GITHUB_RUN_NUMBER}" >> $GITHUB_ENV
+          echo "COMMIT_ID=${GITHUB_SHA: -8}" >> $GITHUB_ENV  # Extract last 8 characters of SHA
+          echo "BRANCH_NAME=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
+
+
+
+
+      - name: Login to egovio docker Container Registry
+        env:
+            DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+            DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+        run: |      
+          # Authenticate with Docker Hub
+          echo "$DOCKER_PASSWORD" | docker login -u "$DOCKER_USERNAME" --password-stdin
+
+      - name: Build and Push Docker image for digit-ui
+        if: ${{ steps.check_files.outputs.run_job_digit_ui == 'true' }}
+        run: |
+          docker build -t workbench-ui:${{ env.BRANCH_NAME }}-${{ env.COMMIT_ID }}-${{ env.ACTION_NUMBER }} -f web/workbench/Dockerfile .
+          docker tag workbench-ui:${{ env.BRANCH_NAME }}-${{ env.COMMIT_ID }}-${{ env.ACTION_NUMBER }} egovio/workbench-ui:${{ env.BRANCH_NAME }}-${{ env.COMMIT_ID }}-${{ env.ACTION_NUMBER }}
+          docker push egovio/workbench-ui:${{ env.BRANCH_NAME }}-${{ env.COMMIT_ID }}-${{ env.ACTION_NUMBER }}
+        working-directory: micro-ui

.github/workflows/codacy.yml

@@ -0,0 +1,61 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+# This workflow checks out code, performs a Codacy security scan
+# and integrates the results with the
+# GitHub Advanced Security code scanning feature.  For more information on
+# the Codacy security scan action usage and parameters, see
+# https://github.com/codacy/codacy-analysis-cli-action.
+# For more information on Codacy Analysis CLI in general, see
+# https://github.com/codacy/codacy-analysis-cli.
+
+name: Codacy Security Scan
+
+on:
+  push:
+    branches: [ "master", "master|hlm-[0-9]+.*", "dev" ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ "master", "dev" ]
+  schedule:
+    - cron: '30 13 * * 1'
+
+permissions:
+  contents: read
+
+jobs:
+  codacy-security-scan:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+    name: Codacy Security Scan
+    runs-on: ubuntu-latest
+    steps:
+      # Checkout the repository to the GitHub Actions runner
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      # Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
+      - name: Run Codacy Analysis CLI
+        uses: codacy/codacy-analysis-cli-action@d840f886c4bd4edc059706d09c6a1586111c540b
+        with:
+          # Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository
+          # You can also omit the token and run the tools that support default configurations
+          project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
+          verbose: true
+          output: results.sarif
+          format: sarif
+          # Adjust severity of non-security issues
+          gh-code-scanning-compat: true
+          # Force 0 exit code to allow SARIF file generation
+          # This will handover control about PR rejection to the GitHub side
+          max-allowed-issues: 2147483647
+
+      # Upload the SARIF file generated in the previous step
+      - name: Upload SARIF results file
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: results.sarif

.github/workflows/publishAllPackages.yml

@@ -0,0 +1,25 @@
+name: Node.js Publish UI Packages
+
+on:
+  push:
+    branches: [ 'develop','campaign' ]
+    paths:
+      - 'micro-ui/web/micro-ui-internals/**'
+
+  pull_request:
+    branches: 
+      - 'dev-hcm'
+      # Push events to branches matching refs/heads/mona/octocat
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 14
+          registry-url: https://registry.npmjs.org/
+      - run: cd micro-ui/web/micro-ui-internals/ && bash ./publish-develop.sh
+        env:
+          NODE_AUTH_TOKEN: ${{secrets.npm_token}}

.github/workflows/publishAllPackagesRelease.yml

@@ -0,0 +1,20 @@
+name: Node.js Publish UI Packages
+
+on:
+  push:
+    branches: [ 'master' ]
+    paths:
+      - 'micro-ui/web/micro-ui-internals/**'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 14
+          registry-url: https://registry.npmjs.org/
+      - run: cd micro-ui/web/micro-ui-internals/ && bash ./publish.sh
+        env:
+          NODE_AUTH_TOKEN: ${{secrets.npm_token}}

.github/workflows/publishProjectFactory.yml

@@ -0,0 +1,77 @@
+name: project factory service docker Image CI
+
+on:
+  push:
+    branches: [ "campaign" ]
+    paths:
+      - 'utilities/project-factory/**'
+  pull_request:
+    branches: [ "campaign" ]
+
+jobs:
+
+  build:
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v3
+      with:
+        fetch-depth: 0  # Fetch all history for tags and branches
+
+    - name: Set up environment variables
+      id: env
+      run: |
+        echo "BRANCH_NAME=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
+        echo "ACTION_NUMBER=${GITHUB_RUN_NUMBER}" >> $GITHUB_ENV
+        echo "COMMIT_ID=${GITHUB_SHA: -8}" >> $GITHUB_ENV  # Extract last 8 characters of SHA
+
+    - name: Build the service Docker image
+      id: docker_build
+      working-directory: ./utilities/project-factory
+      run: |
+        IMAGE_TAG=egovio/project-factory:${{ env.BRANCH_NAME }}-${{ env.COMMIT_ID }}-${{ env.ACTION_NUMBER }}
+        docker build . \
+          --file Dockerfile \
+          --tag $IMAGE_TAG
+        echo "::set-output name=image_name::$IMAGE_TAG"
+
+
+    - name: Build the db migration Docker image
+      id: docker_db_build
+      working-directory: ./utilities/project-factory/migration
+      run: |
+        IMAGE_TAG=egovio/project-factory-db:${{ env.BRANCH_NAME }}-${{ env.COMMIT_ID }}-${{ env.ACTION_NUMBER }}
+        docker build . \
+          --file Dockerfile \
+          --tag $IMAGE_TAG
+        echo "::set-output name=db_image_name::$IMAGE_TAG"
+
+
+    - name: Login to Docker Hub and Push Docker Image
+      working-directory: ./utilities/project-factory
+      env:
+          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+          IMAGE_NAME: ${{ steps.docker_build.outputs.image_name }}
+      run: |      
+          # Authenticate with Docker Hub
+          echo "$DOCKER_PASSWORD" | docker login -u "$DOCKER_USERNAME" --password-stdin
+
+          # Push the image to Docker Hub
+          docker push $IMAGE_NAME
+          echo "Docker image pushed: $IMAGE_NAME"
+
+    - name: Login to Docker Hub and Push DB Migration Docker Image
+      working-directory: ./utilities/project-factory/migration
+      env:
+          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+          DB_IMAGE_NAME: ${{ steps.docker_db_build.outputs.db_image_name }}
+      run: |      
+          # Authenticate with Docker Hub
+          echo "$DOCKER_PASSWORD" | docker login -u "$DOCKER_USERNAME" --password-stdin
+
+          # Push the image to Docker Hub
+          docker push $DB_IMAGE_NAME
+          echo "Docker image pushed: $DB_IMAGE_NAME"

.gitignore

@@ -1,5 +1,88 @@
 .DS_Store
-frontend/micro-ui-internals/node_modules/*
 .idea
 index.lock
 /health-services/stock/stock.iml
+# Ignore target directories
+**/target/
+
+# Ignore IDE-specific files
+*.iml
+*.classpath
+*.project
+*.settings/
+
+# Ignore gitignore files
+**/.gitignore
+
+# Ignore compiled binaries and libraries
+*.jar
+*.war
+*.ear
+bin/
+
+# Ignore system-specific files
+.DS_Store
+Thumbs.db
+# Ignore target directories
+**/target/
+
+# Ignore IDE-specific files
+*.iml
+*.classpath
+*.project
+*.settings/
+
+# Ignore gitignore files
+**/.gitignore
+
+# Ignore compiled binaries and libraries
+*.jar
+*.war
+*.ear
+
+# Ignore system-specific files
+.DS_Store
+Thumbs.db
+# Ignore target directories
+**/target/
+
+# Ignore IDE-specific files
+*.iml
+*.classpath
+*.project
+*.settings/
+
+# Ignore gitignore files
+**/.gitignore
+
+# Ignore compiled binaries and libraries
+*.jar
+*.war
+*.ear
+
+# Ignore system-specific files
+.DS_Store
+Thumbs.db
+# Ignore target directories
+**/target/
+
+# Ignore IDE-specific files
+*.iml
+*.classpath
+*.project
+*.settings/
+
+# Ignore gitignore files
+**/.gitignore
+
+# Ignore compiled binaries and libraries
+*.jar
+*.war
+*.ear
+
+# Ignore system-specific files
+.DS_Store
+Thumbs.db
+
+utilities/project-factory/node_modules/*
+frontend/micro-ui/web/micro-ui-internals/node_modules/*