Merge pull request #2103 from bcgov/feature/EAC-46 #2776

	# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
	# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions

	name: Backend CI

	on:
	workflow_dispatch:
	push:
	branches:
	- master
	- 'feature/**'
	- 'Feature/**'
	- 'fix/*'
	- 'Fix/*'
	paths:
	- 'backend/src/**'
	- 'backend/tests/unit/**'
	pull_request:
	branches: [ master ]
	paths:
	- 'backend/src/**'
	- 'backend/tests/unit/**'

	jobs:
	test:

	runs-on: ubuntu-latest

	defaults:
	run:
	working-directory: backend

	steps:
	- uses: actions/checkout@v3
	- uses: actions/setup-node@v3
	with:
	node-version: '18.x'
	- run: npm ci
	- run: npm run lint:fix
	- name: Run Trivy vulnerability scanner in repo mode
	uses: aquasecurity/trivy-action@master
	with:
	scan-type: 'fs'
	ignore-unfixed: true
	format: 'template'
	template: '@/contrib/sarif.tpl'
	output: 'trivy-results.sarif'
	severity: 'CRITICAL'

	- name: Upload Trivy scan results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: 'trivy-results.sarif'
	##- name: SonarCloud Scan
	##uses: sonarsource/sonarcloud-github-action@master
	##with:
	##projectBaseDir: backend
	##env:
	##GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	##SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback