Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(circleci): add audit, shellcheck and hadolint #447

Merged
merged 34 commits into from
Feb 8, 2021
Merged

Conversation

WikiRik
Copy link
Member

@WikiRik WikiRik commented Nov 28, 2020

With this extra bit I think I'm satisfied with the CircleCI config for a while, so I want to add this to the other modules as well after this has been merged.

@linuxbandit I added you here since I changed the Dockerfile to conform to the newest hadolint version. Please check it out to see if it is correct. If you want to do any changes to the Dockerfile to make it run quicker, please let me know and I will not merge this PR yet. I will copy these changes to the other modules as well

@codecov
Copy link

codecov bot commented Nov 28, 2020

Codecov Report

Merging #447 (29ae752) into master (ac51bfc) will not change coverage.
The diff coverage is 100.00%.

Impacted file tree graph

@@            Coverage Diff            @@
##            master      #447   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           38        38           
  Lines         1877      1877           
  Branches       342       342           
=========================================
  Hits          1877      1877           
Impacted Files Coverage Δ
lib/events.js 100.00% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d3419f0...29ae752. Read the comment docs.

@WikiRik
Copy link
Member Author

WikiRik commented Nov 28, 2020

@linuxbandit in AEGEE/network#1 I already did some changes to the Dockerfile, but I haven't implemented those in this PR. So you can look at that as well for any optimalization

@serge1peshcoff
Copy link
Member

@WikiRik apparently we also need to update the list of the required checks in order to be able to merge anything, should I do it?

@WikiRik
Copy link
Member Author

WikiRik commented Nov 29, 2020

@WikiRik apparently we also need to update the list of the required checks in order to be able to merge anything, should I do it?

We can override it for this PR, and change it after we have merged it. I want to get Fabri's opinion on the Dockerfile first for that


CMD sh /usr/app/scripts/bootstrap.sh && nodemon -e "js,json" lib/run.js
CMD ["sh", "/usr/app/scripts/bootstrap.sh && nodemon -e 'js,json' lib/run.js"]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

not sure if this'll work as there are 2 different commands

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, I was afraid for that already. CMD should only do 1 command though. Maybe @linuxbandit knows more on this

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

best would be to have ENTRYPOINT and CMD. I have an example on a refactoring of core dockerfile, I'll show you

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Splitting them is strange, so I've put a FIXME there so we can look into it later. See for more info; AEGEE/core#195 (comment)

Copy link
Member

@serge1peshcoff serge1peshcoff left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

check out CMD comment, otherwise lgtm

@WikiRik
Copy link
Member Author

WikiRik commented Dec 11, 2020

Changes on the lock file might look big, but because we're using npm ci we don't have to worry about that. It checks that the package.json and the package-lock.json use the same dependencies

@WikiRik WikiRik marked this pull request as ready for review February 8, 2021 12:46
@WikiRik
Copy link
Member Author

WikiRik commented Feb 8, 2021

@serge1peshcoff see my comment in the conversation. We'll fix the CMD later

@WikiRik WikiRik merged commit f0f9ad5 into master Feb 8, 2021
@WikiRik WikiRik deleted the circleci-part-2 branch February 8, 2021 13:17
serge1peshcoff pushed a commit that referenced this pull request Feb 8, 2021
## [1.6.3](1.6.2...1.6.3) (2021-02-08)

### Bug Fixes

* **circleci:** add audit, shellcheck and hadolint ([#447](#447)) ([f0f9ad5](f0f9ad5))
@serge1peshcoff
Copy link
Member

🎉 This PR is included in version 1.6.3 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

WikiRik added a commit that referenced this pull request Feb 8, 2021
WikiRik added a commit that referenced this pull request Feb 8, 2021
serge1peshcoff pushed a commit that referenced this pull request Feb 8, 2021
## [1.6.4](1.6.3...1.6.4) (2021-02-08)

### Reverts

* Revert "fix(circleci): add audit, shellcheck and hadolint (#447)" (#485) ([6b8e698](6b8e698)), closes [#447](#447) [#485](#485)
@WikiRik WikiRik restored the circleci-part-2 branch February 8, 2021 14:00
@WikiRik WikiRik deleted the circleci-part-2 branch February 8, 2021 14:10
WikiRik added a commit that referenced this pull request Feb 8, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants