init google compute scanner

ctrlplanedev · Aug 26, 2024 · b8f6a76 · b8f6a76
1 parent 00b24d1
commit b8f6a76
Show file tree

Hide file tree

Showing 17 changed files with 113 additions and 120 deletions.
diff --git a/.github/workflows/apps-dispatchers-kubernetes-job.yaml b/.github/workflows/apps-dispatchers-kubernetes-job.yaml
diff --git a/.github/workflows/apps-docs.yaml b/.github/workflows/apps-docs.yaml
@@ -1,4 +1,4 @@
-name: CD / Docs
+name: Apps / Docs
 
 on:
   pull_request:

diff --git a/.github/workflows/apps-job-policy-checker.yaml b/.github/workflows/apps-job-policy-checker.yaml
@@ -1,4 +1,4 @@
-name: CD / Job Policy Checker
+name: Apps / Job Policy Checker
 
 on:
   pull_request:

diff --git a/.github/workflows/apps-webservice.yaml b/.github/workflows/apps-webservice.yaml
@@ -1,4 +1,4 @@
-name: CD / Webservice
+name: Apps / Webservice
 
 on:
   pull_request:

diff --git a/.github/workflows/providers-google-compute-scanner.yaml b/.github/workflows/providers-google-compute-scanner.yaml
@@ -0,0 +1,60 @@
+name: Providers / Google Compute Scanner
+
+on:
+  pull_request:
+    branches: ["*"]
+    paths:
+      - providers/google-compute-scanner/**
+      - .github/workflows/providers-google-compute-scanner.yaml
+      - pnpm-lock.yaml
+  push:
+    branches: ["main"]
+    paths:
+      - providers/google-compute-scanner/**
+      - .github/workflows/providers-google-compute-scanner.yaml
+      - pnpm-lock.yaml
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: ctrlplane/google-compute-scanner
+          tags: |
+            type=sha,format=short,prefix=
+
+      - name: Build
+        uses: docker/build-push-action@v6
+        if: github.ref != 'refs/heads/main'
+        with:
+          push: false
+          file: providers/google-compute-scanner/Dockerfile
+          tags: ${{ steps.meta.outputs.tags }}
+
+      - name: Build and Push
+        uses: docker/build-push-action@v6
+        if: github.ref == 'refs/heads/main'
+        with:
+          push: true
+          file: providers/google-compute-scanner/Dockerfile
+          tags: ${{ steps.meta.outputs.tags }}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -3,7 +3,7 @@ packages:
   - packages/*
   - tooling/*
   - agents/*
-  - providers/**
+  - providers/*
 
 catalog:
   eslint: ^9.9.0

diff --git a/providers/google-compute-scanner/Dockerfile b/providers/google-compute-scanner/Dockerfile
@@ -0,0 +1,34 @@
+ARG NODE_VERSION=22
+FROM node:${NODE_VERSION}-alpine
+
+WORKDIR /app
+
+RUN apk add --no-cache libc6-compat python3 make g++
+
+ENV PNPM_HOME="/pnpm"
+ENV PATH="$PNPM_HOME:$PATH"
+
+RUN npm install -g turbo
+RUN corepack enable pnpm
+
+COPY .gitignore .gitignore
+COPY turbo.json turbo.json
+RUN pnpm add -g turbo
+
+COPY package.json package.json
+COPY pnpm-*.yaml .
+
+COPY packages/logger/package.json ./packages/logger/package.json
+COPY packages/node-sdk/package.json ./packages/node-sdk/package.json
+COPY packages/validators/package.json ./packages/validators/package.json
+COPY providers/google-cloud/compute-scanner/package.json ./providers/google-cloud/compute-scanner/package.json
+
+RUN pnpm install --frozen-lockfile
+COPY . .
+RUN turbo build --filter=...@ctrlplane/google-compute-scanner
+
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nodejs
+USER nodejs
+
+CMD node providers/google-cloud/compute-scanner/dist/index.js
diff --git a/...le-cloud/compute-scanner/eslint.config.js → ...s/google-compute-scanner/eslint.config.js b/...le-cloud/compute-scanner/eslint.config.js → ...s/google-compute-scanner/eslint.config.js
diff --git a/...google-cloud/compute-scanner/package.json → ...iders/google-compute-scanner/package.json b/...google-cloud/compute-scanner/package.json → ...iders/google-compute-scanner/package.json
@@ -39,6 +39,7 @@
     "@ctrlplane/prettier-config": "workspace:*",
     "@ctrlplane/tsconfig": "workspace:*",
     "@types/lodash": "^4.17.5",
+    "@types/semver": "^7.5.8",
     "eslint": "catalog:",
     "prettier": "catalog:",
     "typescript": "^5.4.5"

diff --git a/...oogle-cloud/compute-scanner/src/config.ts → ...ders/google-compute-scanner/src/config.ts b/...oogle-cloud/compute-scanner/src/config.ts → ...ders/google-compute-scanner/src/config.ts
diff --git a/...-cloud/compute-scanner/src/gke-connect.ts → ...google-compute-scanner/src/gke-connect.ts b/...-cloud/compute-scanner/src/gke-connect.ts → ...google-compute-scanner/src/gke-connect.ts
diff --git a/...s/google-cloud/compute-scanner/src/gke.ts → providers/google-compute-scanner/src/gke.ts b/...s/google-cloud/compute-scanner/src/gke.ts → providers/google-compute-scanner/src/gke.ts
diff --git a/...google-cloud/compute-scanner/src/index.ts → ...iders/google-compute-scanner/src/index.ts b/...google-cloud/compute-scanner/src/index.ts → ...iders/google-compute-scanner/src/index.ts
diff --git a/...s/google-cloud/compute-scanner/src/sdk.ts → providers/google-compute-scanner/src/sdk.ts b/...s/google-cloud/compute-scanner/src/sdk.ts → providers/google-compute-scanner/src/sdk.ts
diff --git a/...google-cloud/compute-scanner/src/utils.ts → ...iders/google-compute-scanner/src/utils.ts b/...google-cloud/compute-scanner/src/utils.ts → ...iders/google-compute-scanner/src/utils.ts
diff --git a/...oogle-cloud/compute-scanner/tsconfig.json → ...ders/google-compute-scanner/tsconfig.json b/...oogle-cloud/compute-scanner/tsconfig.json → ...ders/google-compute-scanner/tsconfig.json