k8s manifests

Author: halekammoun

.github/workflows/secured-CICD.yml

@@ -9,27 +9,28 @@ on:
 jobs:
   sonarq-integration:
     runs-on: ubuntu-latest
-
     steps:
-    - uses: actions/checkout@v2
-      with:
-        # Disabling shallow clone is recommended for improving relevancy of reporting
-        fetch-depth: 0
-    - name: Test SonarQube connectivity
-      run: |
-        curl -v ${{ secrets.SONAR_HOST_URL }}/api/system/status
-    - name: SonarQube Scan
-      uses: sonarsource/sonarqube-scan-action@v2
-      env:
-        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
-        SONAR_PROJECT_KEY: ${{ secrets.SONAR_PROJECT_KEY }}
-        SONAR_PROJECT_NAME: "Microservice-Based-Password-Manager-with-a-Secure-CI-CD-Pipeline"
+      - uses: actions/checkout@v2
+        with:
+          # Disabling shallow clone improves reporting relevancy
+          fetch-depth: 0
+
+      - name: Test SonarQube connectivity
+        run: |
+          curl -v ${{ secrets.SONAR_HOST_URL }}/api/system/status
+
+      - name: SonarQube Scan
+        uses: sonarsource/sonarqube-scan-action@v2
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+          SONAR_PROJECT_KEY: ${{ secrets.SONAR_PROJECT_KEY }}
+          SONAR_PROJECT_NAME: "Microservice-Based-Password-Manager-with-a-Secure-CI-CD-Pipeline"
 
   build-trivy-scan-and-push:
     runs-on: ubuntu-latest
-    #needs: sonarq-integration  # Uncomment to ensure SonarQube analysis completes before the build 
-
+    # Uncomment the next line to ensure this job waits for SonarQube analysis
+    # needs: sonarq-integration
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -51,12 +52,14 @@ jobs:
           file: ./Dockerfile
           push: false
           tags: ${{ secrets.DOCKERHUB_USERNAME }}/web:latest
+
       - name: Scan image with Trivy
         uses: aquasecurity/trivy-action@master
         with:
           image-ref: ${{ secrets.DOCKERHUB_USERNAME }}/web:latest
+
       - name: Push Docker image
-        if: success()  # Push only if Trivy scan succeeds
+        if: success()
         uses: docker/build-push-action@v2
         with:
           context: .