Jens/geointel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: fix Gitea artifact and npm audit handling
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
Details
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
Details
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
Details
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
Details

Browse Source
This commit is contained in:
Jens
2026-08-26 23:56:58 +02:00
parent 9d8913c134
commit 55c500ca7b
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/release-gates.yml
+11 -5
View File
@@ -57,7 +57,7 @@ jobs:
docker compose config > artifacts/docker-compose.resolved.yml docker compose config > artifacts/docker-compose.resolved.yml
- name: Publish quality evidence - name: Publish quality evidence
if: always() if: always()
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 uses: actions/upload-artifact@c6a3b2bd78b3985e4b2f15397fec357f0fd808de
with: with:
name: quality-evidence name: quality-evidence
path: | path: |
@@ -92,11 +92,17 @@ jobs:
- name: Audit locked frontend dependencies - name: Audit locked frontend dependencies
working-directory: frontend working-directory: frontend
run: | run: |
set +e
npm ci npm ci
npm audit --audit-level=high --json > ../artifacts/npm-audit.json install_status="$?"
if [ "$install_status" -ne 0 ]; then exit "$install_status"; fi
npm audit --audit-level=high --json | tee ../artifacts/npm-audit.json
audit_status="${PIPESTATUS[0]}"
set -e
exit "$audit_status"
- name: Publish dependency evidence - name: Publish dependency evidence
if: always() if: always()
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 uses: actions/upload-artifact@c6a3b2bd78b3985e4b2f15397fec357f0fd808de
with: with:
name: dependency-audits name: dependency-audits
path: | path: |
@@ -138,7 +144,7 @@ jobs:
run: bash scripts/scan_container_image.sh "geointel-ci:$RELEASE_SHA-gis" run: bash scripts/scan_container_image.sh "geointel-ci:$RELEASE_SHA-gis"
- name: Publish GIS container evidence - name: Publish GIS container evidence
if: always() if: always()
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 uses: actions/upload-artifact@c6a3b2bd78b3985e4b2f15397fec357f0fd808de
with: with:
name: container-gis-evidence name: container-gis-evidence
path: | path: |
@@ -181,7 +187,7 @@ jobs:
run: bash scripts/scan_container_image.sh "geointel-ci:$RELEASE_SHA-ai" run: bash scripts/scan_container_image.sh "geointel-ci:$RELEASE_SHA-ai"
- name: Publish AI container evidence - name: Publish AI container evidence
if: always() if: always()
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 uses: actions/upload-artifact@c6a3b2bd78b3985e4b2f15397fec357f0fd808de
with: with:
name: container-ai-evidence name: container-ai-evidence
path: | path: |