backend.yml

# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions

name: Backend CI

on:
  workflow_dispatch:  
  push:
    branches:
      - master
      - 'feature/**'
      - 'Feature/**'
      - 'fix/*'
      - 'Fix/*'
    paths: 
      - 'backend/src/**'
      - 'backend/tests/unit/**'
  pull_request:
    branches: [ master ]
    paths: 
      - 'backend/src/**'
      - 'backend/tests/unit/**'

jobs:
  test:

    runs-on: ubuntu-latest

    defaults:
      run:
        working-directory: backend
        
    steps:
    - uses: actions/checkout@v3
    - uses: actions/setup-node@v3
      with:
        node-version: '18.x'
    - run: npm ci
    - run: npm run lint:fix
    - name: Run Trivy vulnerability scanner in repo mode
      uses: aquasecurity/trivy-action@master
      with:
        scan-type: 'fs'
        ignore-unfixed: true
        format: 'template'
        template: '@/contrib/sarif.tpl'
        output: 'trivy-results.sarif'
        severity: 'CRITICAL'

    - name: Upload Trivy scan results to GitHub Security tab
      uses: github/codeql-action/upload-sarif@v2
      with:
        sarif_file: 'trivy-results.sarif'
    ##- name: SonarCloud Scan
      ##uses: sonarsource/sonarcloud-github-action@master
      ##with:
        ##projectBaseDir: backend
      ##env:
        ##GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        ##SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}