Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add security scan #23

Merged
merged 3 commits into from
Mar 1, 2024

chore: split workflows

649a118
Select commit
Loading
Failed to load commit list.
Merged

feat: add security scan #23

chore: split workflows
649a118
Select commit
Loading
Failed to load commit list.
Google Cloud Build / on-pull-request (sb-devel) succeeded Mar 1, 2024 in 1m 55s

Summary

Build Information

Trigger on-pull-request
Build 637f6eb7-692d-45bb-946e-268ed0397298
Start 2024-03-01T02:07:16-08:00
Duration 1m54.299s
Status SUCCESS

Steps

Step Status Duration
gcr.io/cloud-builders/docker SUCCESS 17.025s
gcr.io/cloud-builders/docker SUCCESS 15.072s
gcr.io/google.com/cloudsdktool/cloud-sdk SUCCESS 1m6.309s

Details

starting build "637f6eb7-692d-45bb-946e-268ed0397298"

FETCHSOURCE
hint: Using 'master' as the name for the initial branch. This default branch name
hint: is subject to change. To configure the initial branch name to use in all
hint: of your new repositories, which will suppress this warning, call:
hint: 
hint: 	git config --global init.defaultBranch <name>
hint: 
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint: 
hint: 	git branch -m <name>
Initialized empty Git repository in /workspace/.git/
From https://github.com/stanislavbebej/ejks
 * branch            649a1189c46cad68a002086c0c809b6387065133 -> FETCH_HEAD
HEAD is now at 649a118 chore: split workflows
BUILD
Starting Step #0
Step #0: Already have image (with digest): gcr.io/cloud-builders/docker
Step #0: Sending build context to Docker daemon  1.044MB

Step #0: Step 1/12 : FROM php:8.3.2-cli-alpine3.19 AS builder
Step #0: 8.3.2-cli-alpine3.19: Pulling from library/php
Step #0: 4abcf2066143: Already exists
Step #0: 9b9ef19a461f: Already exists
Step #0: 0f2fc49c6a93: Already exists
Step #0: 47a4aa92ed63: Already exists
Step #0: 3e9cf6050c6f: Pulling fs layer
Step #0: c1ee940ccff4: Pulling fs layer
Step #0: 6a267137b654: Pulling fs layer
Step #0: c5bf9756a9a7: Pulling fs layer
Step #0: ecfdc99627de: Pulling fs layer
Step #0: c5bf9756a9a7: Waiting
Step #0: ecfdc99627de: Waiting
Step #0: c1ee940ccff4: Download complete
Step #0: 3e9cf6050c6f: Verifying Checksum
Step #0: 3e9cf6050c6f: Download complete
Step #0: 6a267137b654: Verifying Checksum
Step #0: 6a267137b654: Download complete
Step #0: 3e9cf6050c6f: Pull complete
Step #0: c5bf9756a9a7: Verifying Checksum
Step #0: c5bf9756a9a7: Download complete
Step #0: c1ee940ccff4: Pull complete
Step #0: ecfdc99627de: Verifying Checksum
Step #0: ecfdc99627de: Download complete
Step #0: 6a267137b654: Pull complete
Step #0: c5bf9756a9a7: Pull complete
Step #0: ecfdc99627de: Pull complete
Step #0: Digest: sha256:ea8cdb42a3def0a4d65226f9348fa4ea67ef9bbefb445200778f329c795e9b4b
Step #0: Status: Downloaded newer image for php:8.3.2-cli-alpine3.19
Step #0:  ---> 206520a87297
Step #0: Step 2/12 : RUN apk --no-cache add sqlite     && wget https://github.com/tdewolff/minify/releases/download/v2.20.10/minify_linux_amd64.tar.gz     && tar -zxf minify_linux_amd64.tar.gz -C /usr/local/bin minify
Step #0:  ---> Running in 36ddc11f565c
Step #0: fetch https://dl-cdn.alpinelinux.org/alpine/v3.19/main/x86_64/APKINDEX.tar.gz
Step #0: fetch https://dl-cdn.alpinelinux.org/alpine/v3.19/community/x86_64/APKINDEX.tar.gz
Step #0: (1/1) Installing sqlite (3.44.2-r0)
Step #0: Executing busybox-1.36.1-r15.trigger
Step #0: OK: 21 MiB in 39 packages
Step #0: �[91mConnecting to github.com (192.30.255.113:443)
Step #0: �[0m�[91mConnecting to objects.githubusercontent.com (185.199.108.133:443)
Step #0: �[0m�[91msaving to 'minify_linux_amd64.tar.gz'
Step #0: �[0m�[91mminify_linux_amd64.t �[0m�[91m 69% �[0m�[91m|**********************          | 1229k  0:00:00 ETA
Step #0: �[0m�[91mminify_linux_amd64.t 100% |********************************| �[0m�[91m1760k�[0m�[91m  0:00:00 ETA�[0m�[91m
Step #0: �[0m�[91m'minify_linux_amd64.tar.gz' saved
Step #0: �[0mRemoving intermediate container 36ddc11f565c
Step #0:  ---> fb76618232ff
Step #0: Step 3/12 : COPY src/ .
Step #0:  ---> 0fec7fda2032
Step #0: Step 4/12 : COPY db/ .
Step #0:  ---> 3dcb2a74a8ad
Step #0: Step 5/12 : RUN echo .quit | sqlite3 -init init.sql jks.db
Step #0:  ---> Running in b6361eaeba80
Step #0: Removing intermediate container b6361eaeba80
Step #0:  ---> 978e11a463b4
Step #0: Step 6/12 : RUN mkdir /ejks     && php index.php | minify --type html | tr -d '\n' > /ejks/index.html     && php info.php  | minify --type html | tr -d '\n' > /ejks/info.html     && echo "SELECT cislo FROM jks WHERE strofa = 0 ORDER BY cislo" | sqlite3 jks.db > piesen.list     && for i in $(cat piesen.list); do php-cgi -q jks.php id=$i | minify --type html | tr -d '\n' > /ejks/$i.html; done
Step #0:  ---> Running in 192331f90a9f
Step #0: Removing intermediate container 192331f90a9f
Step #0:  ---> f524c01da763
Step #0: Step 7/12 : RUN find /ejks -type f -name '*.html' | sed 's#/ejks#https://ejks.sk#g' | sort -u > /ejks/sitemap.txt
Step #0:  ---> Running in f16d33e9b9bc
Step #0: Removing intermediate container f16d33e9b9bc
Step #0:  ---> 18ef8e4f1fe4
Step #0: Step 8/12 : FROM nginx:1.25.3-alpine-slim
Step #0: 1.25.3-alpine-slim: Pulling from library/nginx
Step #0: 619be1103602: Pulling fs layer
Step #0: 6c866301bd2c: Pulling fs layer
Step #0: 9e03973bc803: Pulling fs layer
Step #0: a3a550dcd386: Pulling fs layer
Step #0: d18780149b81: Pulling fs layer
Step #0: 4ea31a8fb875: Pulling fs layer
Step #0: e57ebb3e2067: Pulling fs layer
Step #0: a3a550dcd386: Waiting
Step #0: d18780149b81: Waiting
Step #0: 4ea31a8fb875: Waiting
Step #0: e57ebb3e2067: Waiting
Step #0: 9e03973bc803: Verifying Checksum
Step #0: 9e03973bc803: Download complete
Step #0: 619be1103602: Verifying Checksum
Step #0: 619be1103602: Download complete
Step #0: 6c866301bd2c: Verifying Checksum
Step #0: 6c866301bd2c: Download complete
Step #0: 619be1103602: Pull complete
Step #0: 4ea31a8fb875: Verifying Checksum
Step #0: 4ea31a8fb875: Download complete
Step #0: 6c866301bd2c: Pull complete
Step #0: 9e03973bc803: Pull complete
Step #0: a3a550dcd386: Verifying Checksum
Step #0: a3a550dcd386: Download complete
Step #0: d18780149b81: Verifying Checksum
Step #0: d18780149b81: Download complete
Step #0: a3a550dcd386: Pull complete
Step #0: d18780149b81: Pull complete
Step #0: 4ea31a8fb875: Pull complete
Step #0: e57ebb3e2067: Verifying Checksum
Step #0: e57ebb3e2067: Download complete
Step #0: e57ebb3e2067: Pull complete
Step #0: Digest: sha256:4b4bc9f88bd63fb3abc8fd4f5ad7f16554589ca1fca8d3a53416ff55b59b6f80
Step #0: Status: Downloaded newer image for nginx:1.25.3-alpine-slim
Step #0:  ---> 0a9b69a79338
Step #0: Step 9/12 : COPY nginx-default-server.conf /etc/nginx/conf.d/default.conf
Step #0:  ---> 3f6f4a7943f7
Step #0: Step 10/12 : COPY --from=builder /ejks /usr/share/nginx/html
Step #0:  ---> 4d46f2c9b8fd
Step #0: Step 11/12 : COPY src/favicon.ico src/googlee78c4ec223f14545.html /usr/share/nginx/html/
Step #0:  ---> b7158639d0fa
Step #0: Step 12/12 : COPY src/ico /usr/share/nginx/html/ico
Step #0:  ---> 8bdfc50a2ae6
Step #0: Successfully built 8bdfc50a2ae6
Step #0: Successfully tagged europe-west1-docker.pkg.dev/sb-devel/binary-store/ejks-image:649a118
Step #0: Successfully tagged europe-west1-docker.pkg.dev/sb-devel/binary-store/ejks-image:latest
Finished Step #0
Starting Step #1
Step #1: Already have image (with digest): gcr.io/cloud-builders/docker
Step #1: The push refers to repository [europe-west1-docker.pkg.dev/sb-devel/binary-store/ejks-image]
Step #1: 5e34e287e78a: Preparing
Step #1: d661d994347b: Preparing
Step #1: e1792778615f: Preparing
Step #1: b6e27c106d00: Preparing
Step #1: 61b0026600b0: Preparing
Step #1: 4fc77163dad1: Preparing
Step #1: 21eb277a065e: Preparing
Step #1: 9a3be9af92ce: Preparing
Step #1: ad2ff101ef18: Preparing
Step #1: de350a697563: Preparing
Step #1: aedc3bda2944: Preparing
Step #1: 4fc77163dad1: Waiting
Step #1: 21eb277a065e: Waiting
Step #1: 9a3be9af92ce: Waiting
Step #1: ad2ff101ef18: Waiting
Step #1: de350a697563: Waiting
Step #1: aedc3bda2944: Waiting
Step #1: 61b0026600b0: Layer already exists
Step #1: 4fc77163dad1: Layer already exists
Step #1: 21eb277a065e: Layer already exists
Step #1: 9a3be9af92ce: Layer already exists
Step #1: ad2ff101ef18: Layer already exists
Step #1: d661d994347b: Pushed
Step #1: b6e27c106d00: Pushed
Step #1: 5e34e287e78a: Pushed
Step #1: e1792778615f: Pushed
Step #1: de350a697563: Layer already exists
Step #1: aedc3bda2944: Layer already exists
Step #1: 649a118: digest: sha256:c81b588f7a37f69ee4fdcc84a4d961801e3d56a7333d0fce2040ec4b99ba2320 size: 2610
Finished Step #1
Starting Step #2
Step #2: Pulling image: gcr.io/google.com/cloudsdktool/cloud-sdk
Step #2: Using default tag: latest
Step #2: latest: Pulling from google.com/cloudsdktool/cloud-sdk
Step #2: 09e2bc8a597c: Already exists
Step #2: 73acf58731cd: Pulling fs layer
Step #2: 06fb38ec3db6: Pulling fs layer
Step #2: 14b734960582: Pulling fs layer
Step #2: 704cba575410: Pulling fs layer
Step #2: e5e2f3ad4e91: Pulling fs layer
Step #2: efa7143b1707: Pulling fs layer
Step #2: e5e2f3ad4e91: Waiting
Step #2: 704cba575410: Waiting
Step #2: efa7143b1707: Waiting
Step #2: 14b734960582: Verifying Checksum
Step #2: 14b734960582: Download complete
Step #2: 73acf58731cd: Verifying Checksum
Step #2: 73acf58731cd: Download complete
Step #2: 06fb38ec3db6: Verifying Checksum
Step #2: 06fb38ec3db6: Download complete
Step #2: efa7143b1707: Verifying Checksum
Step #2: efa7143b1707: Download complete
Step #2: 73acf58731cd: Pull complete
Step #2: e5e2f3ad4e91: Verifying Checksum
Step #2: e5e2f3ad4e91: Download complete
Step #2: 06fb38ec3db6: Pull complete
Step #2: 14b734960582: Pull complete
Step #2: 704cba575410: Verifying Checksum
Step #2: 704cba575410: Download complete
Step #2: 704cba575410: Pull complete
Step #2: e5e2f3ad4e91: Pull complete
Step #2: efa7143b1707: Pull complete
Step #2: Digest: sha256:0c98f79e45fd679fe4fe52c6401b925f75019ba6e1d446fdf6a08fb639208e7b
Step #2: Status: Downloaded newer image for gcr.io/google.com/cloudsdktool/cloud-sdk:latest
Step #2: gcr.io/google.com/cloudsdktool/cloud-sdk:latest
Step #2: Deploying container to Cloud Run service [ejks-sk] in project [sb-devel] region [europe-west1]
Step #2: Deploying...
Step #2: Creating Revision........................................................................................................................done
Step #2: Routing traffic.....done
Step #2: Done.
Step #2: Service [ejks-sk] revision [ejks-sk-00009-pm2] has been deployed and is serving 100 percent of traffic.
Step #2: Service URL: https://ejks-sk-2eqtiwxg2q-ew.a.run.app
Finished Step #2
PUSH
Pushing europe-west1-docker.pkg.dev/sb-devel/binary-store/ejks-image:649a118
The push refers to repository [europe-west1-docker.pkg.dev/sb-devel/binary-store/ejks-image]
5e34e287e78a: Preparing
d661d994347b: Preparing
e1792778615f: Preparing
b6e27c106d00: Preparing
61b0026600b0: Preparing
4fc77163dad1: Preparing
21eb277a065e: Preparing
9a3be9af92ce: Preparing
ad2ff101ef18: Preparing
de350a697563: Preparing
aedc3bda2944: Preparing
9a3be9af92ce: Waiting
ad2ff101ef18: Waiting
4fc77163dad1: Waiting
de350a697563: Waiting
21eb277a065e: Waiting
aedc3bda2944: Waiting
5e34e287e78a: Layer already exists
61b0026600b0: Layer already exists
d661d994347b: Layer already exists
b6e27c106d00: Layer already exists
e1792778615f: Layer already exists
21eb277a065e: Layer already exists
ad2ff101ef18: Layer already exists
4fc77163dad1: Layer already exists
9a3be9af92ce: Layer already exists
de350a697563: Layer already exists
aedc3bda2944: Layer already exists
649a118: digest: sha256:c81b588f7a37f69ee4fdcc84a4d961801e3d56a7333d0fce2040ec4b99ba2320 size: 2610
Pushing europe-west1-docker.pkg.dev/sb-devel/binary-store/ejks-image:latest
The push refers to repository [europe-west1-docker.pkg.dev/sb-devel/binary-store/ejks-image]
5e34e287e78a: Preparing
d661d994347b: Preparing
e1792778615f: Preparing
b6e27c106d00: Preparing
61b0026600b0: Preparing
4fc77163dad1: Preparing
21eb277a065e: Preparing
9a3be9af92ce: Preparing
ad2ff101ef18: Preparing
de350a697563: Preparing
aedc3bda2944: Preparing
4fc77163dad1: Waiting
21eb277a065e: Waiting
9a3be9af92ce: Waiting
ad2ff101ef18: Waiting
de350a697563: Waiting
aedc3bda2944: Waiting
e1792778615f: Layer already exists
d661d994347b: Layer already exists
b6e27c106d00: Layer already exists
61b0026600b0: Layer already exists
5e34e287e78a: Layer already exists
de350a697563: Layer already exists
9a3be9af92ce: Layer already exists
ad2ff101ef18: Layer already exists
4fc77163dad1: Layer already exists
21eb277a065e: Layer already exists
aedc3bda2944: Layer already exists
latest: digest: sha256:c81b588f7a37f69ee4fdcc84a4d961801e3d56a7333d0fce2040ec4b99ba2320 size: 2610
DONE

Build Log: https://console.cloud.google.com/cloud-build/builds/637f6eb7-692d-45bb-946e-268ed0397298?project=364736373373