Merge pull request #3715 from bcgov/NDT-602-Wrong-Username-in-announc… #10308
main.yaml
on: push
Matrix: build / build-and-push-image
install-env
/
install-test-env
1m 10s
is-tagged-release
28s
test-checks
/
trivy-scan-code
25s
test-checks
/
cocogitto
36s
test-checks
/
gitleaks
39s
test-checks
/
check_immutable_sqitch_files
35s
test-checks
/
check_deleted_sqitch_tags
25s
rebase-feature-pr
32s
Matrix: test-checks / codeql-scan
setup-s3-backup
/
deploy-s3-secret-to-dev
24s
setup-s3-backup
/
deploy-s3-secret-to-test
22s
setup-s3-backup
/
deploy-s3-secret-to-prod
20s
has-merge-conflict
/
check_merge_conflicts
29s
cleanup_feature
/
clean-feature-env
test-checks
/
lint-chart
23s
test-containers
/
trivy-scan-app
2m 8s
test-containers
/
trivy-scan-db
21s
test-code
/
jest
6m 37s
test-code
/
eslint
1m 42s
test-code
/
schema
1m 41s
test-code
/
reverts
3m 17s
test-code
/
pgtap
2m 18s
test-e2e
/
yarn-test-e2e-applicant
4m 57s
test-e2e
/
yarn-test-e2e-admin
3m 30s
test-e2e
/
yarn-test-e2e-analyst
9m 4s
test-zap
/
zap-owasp-full
6m 16s
ensure-sqitch-plan-ends-with-tag
3s
deploy-feature
/
deploy-feature-to-openshift-development
test-e2e
/
yarn-test-e2e-finalize
59s
deploy-feature
/
update-jira-issue
deploy
/
...
/
export-secrets
19s
deploy
/
...
/
export-secrets
17s
deploy
/
...
/
export-secrets
23s
deploy
/
create-release
27s
deploy
/
...
/
create_hotfix_branch
50s
Deployment protection rules
Reviewers, timers, and other rules protecting deployments in this run
Event | Environments |
---|---|
MarsRomer
approved
|
production |
MarsRomer
approved
|
production |
Annotations
51 warnings
setup-s3-backup / deploy-s3-secret-to-prod
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.17.9.tar.gz, openshift-client-linux-amd64-rhel8-4.17.9.tar.gz, openshift-client-linux-amd64-rhel9-4.17.9.tar.gz, openshift-client-linux-arm64-4.17.9.tar.gz, openshift-client-linux-arm64-rhel8-4.17.9.tar.gz, openshift-client-linux-arm64-rhel9-4.17.9.tar.gz, openshift-client-linux-ppc64le-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel8-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel9-4.17.9.tar.gz, openshift-client-linux-s390x-rhel8-4.17.9.tar.gz, openshift-client-linux-s390x-rhel9-4.17.9.tar.gz. Selecting the first one.
|
setup-s3-backup / deploy-s3-secret-to-test
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.17.9.tar.gz, openshift-client-linux-amd64-rhel8-4.17.9.tar.gz, openshift-client-linux-amd64-rhel9-4.17.9.tar.gz, openshift-client-linux-arm64-4.17.9.tar.gz, openshift-client-linux-arm64-rhel8-4.17.9.tar.gz, openshift-client-linux-arm64-rhel9-4.17.9.tar.gz, openshift-client-linux-ppc64le-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel8-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel9-4.17.9.tar.gz, openshift-client-linux-s390x-rhel8-4.17.9.tar.gz, openshift-client-linux-s390x-rhel9-4.17.9.tar.gz. Selecting the first one.
|
setup-s3-backup / deploy-s3-secret-to-dev
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.17.9.tar.gz, openshift-client-linux-amd64-rhel8-4.17.9.tar.gz, openshift-client-linux-amd64-rhel9-4.17.9.tar.gz, openshift-client-linux-arm64-4.17.9.tar.gz, openshift-client-linux-arm64-rhel8-4.17.9.tar.gz, openshift-client-linux-arm64-rhel9-4.17.9.tar.gz, openshift-client-linux-ppc64le-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel8-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel9-4.17.9.tar.gz, openshift-client-linux-s390x-rhel8-4.17.9.tar.gz, openshift-client-linux-s390x-rhel9-4.17.9.tar.gz. Selecting the first one.
|
test-checks / lint-chart
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-checks / lint-chart
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.17.9.tar.gz, openshift-client-linux-amd64-rhel8-4.17.9.tar.gz, openshift-client-linux-amd64-rhel9-4.17.9.tar.gz, openshift-client-linux-arm64-4.17.9.tar.gz, openshift-client-linux-arm64-rhel8-4.17.9.tar.gz, openshift-client-linux-arm64-rhel9-4.17.9.tar.gz, openshift-client-linux-ppc64le-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel8-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel9-4.17.9.tar.gz, openshift-client-linux-s390x-rhel8-4.17.9.tar.gz, openshift-client-linux-s390x-rhel9-4.17.9.tar.gz. Selecting the first one.
|
test-checks / trivy-scan-code
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-checks / check_deleted_sqitch_tags
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
build / cron-sp
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
is-tagged-release
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
rebase-feature-pr
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
build / db
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
has-merge-conflict / check_merge_conflicts
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-checks / check_immutable_sqitch_files
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-checks / cocogitto
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
ensure-sqitch-plan-ends-with-tag
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
build / cron-shp
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-checks / gitleaks
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
install-env / install-test-env
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-code / schema
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-code / eslint
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-code / pgtap
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-checks / codeql-scan (javascript, linux)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-code / reverts
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
build / app
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Sensitive data should not be used in the ARG or ENV commands:
app/Dockerfile#L21
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "SENTRY_AUTH_TOKEN")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
Sensitive data should not be used in the ARG or ENV commands:
app/Dockerfile#L20
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "SENTRY_AUTH_TOKEN")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
SonarScanner
This action is deprecated and will be removed in a future release. Please use the sonarqube-scan-action action instead. The sonarqube-scan-action is a drop-in replacement for this action.
|
test-containers / trivy-scan-db
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-containers / trivy-scan-app
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-containers / renovate
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-e2e / yarn-test-e2e-admin
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
deploy / is-tagged-release
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
deploy / deploy-to-openshift-development
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.17.9.tar.gz, openshift-client-linux-amd64-rhel8-4.17.9.tar.gz, openshift-client-linux-amd64-rhel9-4.17.9.tar.gz, openshift-client-linux-arm64-4.17.9.tar.gz, openshift-client-linux-arm64-rhel8-4.17.9.tar.gz, openshift-client-linux-arm64-rhel9-4.17.9.tar.gz, openshift-client-linux-ppc64le-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel8-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel9-4.17.9.tar.gz, openshift-client-linux-s390x-rhel8-4.17.9.tar.gz, openshift-client-linux-s390x-rhel9-4.17.9.tar.gz. Selecting the first one.
|
deploy / deploy-to-openshift-development
Unexpected input(s) 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'aws_clam_s3_bucket', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'pgbackrest_s3_bucket', 'session_secret', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_username', 'openshift_password', 'insecure_skip_tls_verify', 'certificate_authority_data', 'namespace', 'reveal_cluster_name']
|
deploy / deploy-to-openshift-development
Unexpected input(s) 'keycloak_host', 'sa_client_secret', 'sa_client_id', 'pgbackrest_s3_key', 'pgbackrest_s3_key_secret', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'tag', 'client_secret', 'secure_route', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_clam_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'certbot_email', 'certbot_server', 'environment', 'enable_load_test', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'sp_sa_user', 'sp_sa_password', 'sp_site', 'sp_doc_library', 'sp_ms_file_name', 'sp_list_name', 'ches_url', 'ches_client', 'ches_client_secret', 'ches_to', 'ches_keycloak_host', 'pgbackrest_s3_bucket', 'er_file', 'rd_file', 'coverages_file', 'session_secret']
|
deploy / ensure-sqitch-plan-ends-with-tag
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
deploy / backup-secrets-dev / export-secrets
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-e2e / yarn-test-e2e-applicant
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-zap / zap-owasp-full
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-e2e / yarn-test-e2e-analyst
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
deploy / deploy-to-openshift-test
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.17.9.tar.gz, openshift-client-linux-amd64-rhel8-4.17.9.tar.gz, openshift-client-linux-amd64-rhel9-4.17.9.tar.gz, openshift-client-linux-arm64-4.17.9.tar.gz, openshift-client-linux-arm64-rhel8-4.17.9.tar.gz, openshift-client-linux-arm64-rhel9-4.17.9.tar.gz, openshift-client-linux-ppc64le-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel8-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel9-4.17.9.tar.gz, openshift-client-linux-s390x-rhel8-4.17.9.tar.gz, openshift-client-linux-s390x-rhel9-4.17.9.tar.gz. Selecting the first one.
|
deploy / deploy-to-openshift-test
Unexpected input(s) 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'aws_clam_s3_bucket', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'pgbackrest_s3_bucket', 'session_secret', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_username', 'openshift_password', 'insecure_skip_tls_verify', 'certificate_authority_data', 'namespace', 'reveal_cluster_name']
|
deploy / deploy-to-openshift-test
Unexpected input(s) 'keycloak_host', 'sa_client_secret', 'sa_client_id', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'tag', 'client_secret', 'secure_route', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_clam_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'certbot_email', 'certbot_server', 'environment', 'enable_load_test', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'sp_sa_user', 'sp_sa_password', 'sp_site', 'sp_doc_library', 'sp_ms_file_name', 'sp_list_name', 'ches_url', 'ches_client', 'ches_client_secret', 'ches_to', 'ches_keycloak_host', 'pgbackrest_s3_bucket', 'er_file', 'rd_file', 'coverages_file', 'session_secret']
|
deploy / backup-secrets-test / export-secrets
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
test-e2e / yarn-test-e2e-finalize
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
deploy / deploy-to-openshift-production
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.17.9.tar.gz, openshift-client-linux-amd64-rhel8-4.17.9.tar.gz, openshift-client-linux-amd64-rhel9-4.17.9.tar.gz, openshift-client-linux-arm64-4.17.9.tar.gz, openshift-client-linux-arm64-rhel8-4.17.9.tar.gz, openshift-client-linux-arm64-rhel9-4.17.9.tar.gz, openshift-client-linux-ppc64le-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel8-4.17.9.tar.gz, openshift-client-linux-ppc64le-rhel9-4.17.9.tar.gz, openshift-client-linux-s390x-rhel8-4.17.9.tar.gz, openshift-client-linux-s390x-rhel9-4.17.9.tar.gz. Selecting the first one.
|
deploy / deploy-to-openshift-production
Unexpected input(s) 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'aws_clam_s3_bucket', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'pgbackrest_s3_bucket', 'session_secret', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_username', 'openshift_password', 'insecure_skip_tls_verify', 'certificate_authority_data', 'namespace', 'reveal_cluster_name']
|
deploy / deploy-to-openshift-production
Unexpected input(s) 'keycloak_host', 'sa_client_secret', 'sa_client_id', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'tag', 'client_secret', 'secure_route', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_clam_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'certbot_email', 'certbot_server', 'environment', 'enable_load_test', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'sp_sa_user', 'sp_sa_password', 'sp_site', 'sp_doc_library', 'sp_ms_file_name', 'sp_list_name', 'ches_url', 'ches_client', 'ches_client_secret', 'ches_to', 'ches_keycloak_host', 'pgbackrest_s3_bucket', 'er_file', 'rd_file', 'coverages_file', 'session_secret']
|
deploy / create-release
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
deploy / create_hotfix_branch / create_hotfix_branch
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
deploy / backup-secrets-prod / export-secrets
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Artifacts
Produced during runtime
Name | Size | |
---|---|---|
bcgov~CONN-CCBC-portal~807I9N.dockerbuild
|
46.9 KB |
|
bcgov~CONN-CCBC-portal~BQCW1H.dockerbuild
|
65.4 KB |
|
bcgov~CONN-CCBC-portal~KNA92R.dockerbuild
|
108 KB |
|
bcgov~CONN-CCBC-portal~XX1RAM.dockerbuild
|
78.6 KB |
|
zap_scan
|
361 KB |
|