Djeex
5a7a60d299
CI / build-and-scan (push) Successful in 1m37s
- release changelog: commits rendered as description (link), divider lines dropped - gitleaks secret scan and hadolint on every push/PR - ruff lint/format gate (Python repos) with a pytest --cov-fail-under gate - scheduled CRITICAL Trivy failures attempt an apk upgrade rebuild and open a follow-up PR if it clears the finding, instead of just failing red - images also published to ghcr.io/djeex/<repo> - a matching GitHub Release is created on the GitHub mirror, with a notice pointing back to this repo as the source of truth
35 lines
617 B
Docker
35 lines
617 B
Docker
FROM python:3.14.7-alpine AS base
|
|
|
|
RUN apk add --no-cache ca-certificates
|
|
|
|
WORKDIR /app
|
|
|
|
COPY VERSION /VERSION
|
|
COPY /app/ /app/
|
|
|
|
RUN pip install --no-cache-dir -r requirements.txt
|
|
|
|
FROM base AS test
|
|
|
|
RUN pip install --no-cache-dir pytest==9.1.1 pytest-cov==7.1.0
|
|
|
|
COPY pytest.ini /app/pytest.ini
|
|
COPY /tests/ /app/tests/
|
|
|
|
CMD ["pytest", "-v"]
|
|
|
|
FROM base AS lint
|
|
|
|
RUN pip install --no-cache-dir ruff==0.16.4
|
|
COPY ruff.toml /app/ruff.toml
|
|
COPY /tests/ /app/tests/
|
|
RUN ruff check . && ruff format --check .
|
|
|
|
FROM base
|
|
|
|
RUN addgroup -g 911 nvbot && adduser -D -u 911 -G nvbot nvbot
|
|
|
|
USER nvbot
|
|
|
|
CMD ["python", "main.py"]
|