ci(ci): add cmseek to matrix make build

nigthknight · nigthknight · commit 2ec69ffa7f0e · 2021-10-12T22:51:30.000+02:00
Signed-off-by: Yannik Fuhrmeister &lt;yannik.fuhrmeister@protonmail.com&gt;
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -280,6 +280,7 @@ jobs:
         unit:
           - amass
           - angularjs-csti-scanner
+          - cmseek
           - gitleaks
           - kubeaudit
           - kube-hunter
@@ -492,7 +493,6 @@ jobs:
     strategy:
       matrix:
         parser:
-          - cmseek
           - git-repo-scanner
           - test-scan
 
@@ -565,66 +565,6 @@ jobs:
   # This Matrix should contain Third Party Scanners
   # The Tag for the Image should be the current version of the Scanner
 
-  scanners-third-party:
-    name: "Build | Third Party Scanner"
-    needs:
-      - unit-python
-      - unit-javascript
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        scanner:
-          - cmseek
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v2
-
-      - name: Set ENV Var with Scanner Version
-        uses: mikefarah/yq@v4.4.1
-        # Notice: The current version of the scanner is provided via the Chart.yaml to ensure
-        # there is only one place to edit the version of a scanner
-        with:
-          cmd: echo scannerVersion=$(yq e .appVersion scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
-
-      - name: Docker Meta
-        id: docker_meta
-        uses: docker/metadata-action@v3
-        with:
-          images: ${{ env.DOCKER_NAMESPACE }}/scanner-${{ matrix.scanner }}
-          tags: |
-            type=sha
-            ${{ env.scannerVersion }}
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
-
-      - name: Login to DockerHub
-        uses: docker/login-action@v1
-        with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_TOKEN }}
-
-      - name: Build and Push
-        uses: docker/build-push-action@v2
-        with:
-          context: ./scanners/${{ matrix.scanner }}/scanner
-          file: ./scanners/${{ matrix.scanner }}/scanner/Dockerfile
-          build-args: |
-            scannerVersion=${{ env.scannerVersion }}
-          platforms: linux/amd64
-          push: true
-          tags: ${{ steps.docker_meta.outputs.tags }}
-          labels: ${{ steps.docker_meta.outputs.labels }}
-
-      - name: Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v2
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_PASSWORD }}
-          repository: ${{ env.DOCKER_NAMESPACE }}/scanner-${{ matrix.scanner }}
-          readme-filepath: ./scanners/${{ matrix.scanner }}/docs/README.DockerHub-Scanner.md
-
   # ---- Build | Scanners | Custom Scanner ----
 
   # This Section contains Scanners that are developed by the secureCodeBox project
@@ -925,19 +865,6 @@ jobs:
           kubectl create deployment --image nginx:alpine nginx --namespace demo-targets
           kubectl expose deployment nginx --port 80 --namespace demo-targets
 
-      # ---- CMSeeK Integration Tests ----
-
-      - name: "cmseek Integration Tests"
-        run: |
-          kubectl -n integration-tests delete scans --all
-          helm -n integration-tests install cmseek ./scanners/cmseek/  \
-            --set="parser.image.tag=sha-$(git rev-parse --short HEAD)" \
-            --set="parser.image.repository=docker.io/${{ env.DOCKER_NAMESPACE }}/parser-cmseek" \
-            --set="parser.env[0].name=CRASH_ON_FAILED_VALIDATION" \
-            --set-string="parser.env[0].value=true"
-          cd tests/integration/
-          npx jest --ci --color scanner/cmseek.test.js
-
       # ---- Notification Hook Tests ----
 
       - name: "Notification Hook Tests"
diff --git a/scanners/cmseek/.gitignore b/scanners/cmseek/.gitignore
@@ -0,0 +1 @@
+*.tar
diff --git a/scanners/cmseek/Makefile b/scanners/cmseek/Makefile
@@ -10,3 +10,10 @@ scanner = cmseek
 custom_scanner = set
 
 include ../../scanners.mk
+
+integration-tests:
+	@echo ".: 🩺 Starting integration test in kind namespace 'integration-tests'."
+	kubectl -n integration-tests delete scans --all
+	cd ../../tests/integration/ && npm ci
+	cd ../../scanners/${scanner}
+	npx --yes --package jest@$(JEST_VERSION) jest --verbose --ci --colors --coverage --passWithNoTests ${scanner}/integration-tests
diff --git a/scanners/cmseek/integration-tests/cmseek.test.js b/scanners/cmseek/integration-tests/cmseek.test.js
@@ -2,7 +2,7 @@
 //
 // SPDX-License-Identifier: Apache-2.0
 
-const { scan } = require("../helpers");
+const { scan } = require("../../../tests/integration/helpers");
 
 jest.retryTimes(3);
 
diff --git a/scanners/cmseek/integration-tests/jest.config.json b/scanners/cmseek/integration-tests/jest.config.json
@@ -0,0 +1 @@
+{}
