diff --git a/.github/workflows/react-dependency-check.yaml b/.github/workflows/react-dependency-check.yaml index 316809a..7abe9f7 100644 --- a/.github/workflows/react-dependency-check.yaml +++ b/.github/workflows/react-dependency-check.yaml @@ -3,8 +3,8 @@ name: trivy dependency check for package.json # TODO: aquaを使ってインストールして使う形にしたほうがわかりやすいかも on: push: - paths: - - "package.json" + # paths: + # - "package.json" schedule: # 日曜日の午前0時に実行 - cron: '0 0 * * 0' diff --git a/.github/workflows/react-jest.yaml b/.github/workflows/react-jest.yaml index 396e992..b686019 100644 --- a/.github/workflows/react-jest.yaml +++ b/.github/workflows/react-jest.yaml @@ -1,17 +1,17 @@ name: run-jest on: push: - paths: - - "src/**.tsx" - - "src/**.ts" - - "public/**.html" + # paths: + # - "src/**.tsx" + # - "src/**.ts" + # - "public/**.html" defaults: run: shell: bash jobs: - frontend-jest: # job id(Typed by user) + frontend-jest: # job id(typed by user) runs-on: ubuntu-latest permissions: contents: read @@ -21,10 +21,10 @@ jobs: working-directory: /home/runner/work/devsecops-demo-aws-ecs/devsecops-demo-aws-ecs steps: - # Checkout repository to runner + # checkout repository to runner - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 - - name: Set up node20 + - name: set up node20 uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3.8.2 with: node-version: '20' @@ -36,8 +36,8 @@ jobs: with: aqua_version: v2.29.0 - - name: Install Dependencies - run: github-comment exec --token ${{ secrets.TOKEN }} -- npm install + - name: install dependencies + run: github-comment exec --token ${{ secrets.token }} -- npm install - - name: Run npm test - run: github-comment exec --token ${{ secrets.TOKEN }} -- npm test -- --watchAll=false + - name: run npm test + run: github-comment exec --token ${{ secrets.token }} -- npm test -- --watchall=false diff --git a/.github/workflows/react-semgrep.yaml b/.github/workflows/react-semgrep.yaml index 2ace36f..37031df 100644 --- a/.github/workflows/react-semgrep.yaml +++ b/.github/workflows/react-semgrep.yaml @@ -3,10 +3,10 @@ name: Semgrep Full Scan #リポジトリの設定から --> Code and automation --> Actions --> GeneralのWorkflow permissionsをRead and write permissionsに[参考画像](../../doc/fig/semgrep_upgrade_grant.png) on: push: - paths: - - "src/**.tsx" - - "src/**.ts" - - "public/**.html" + # paths: + # - "src/**.tsx" + # - "src/**.ts" + # - "public/**.html" schedule: # 日曜日の午前0時に実行 - cron: '0 0 * * 0'