Skip to content

Conversation

@sujata-m
Copy link
Contributor

  • Fixed Issue-1704
  • Enabled the dev and stage pipeline

- Fixed Issue-[1704](https://dev.azure.com/TDEI-UW/TDEI/_workitems/edit/1704)
- Enabled the dev and stage pipeline
@sujata-m sujata-m requested review from MashB and susrisha February 11, 2025 08:33
Comment on lines +25 to +38
needs: Build
environment:
name: Development
runs-on: ubuntu-latest
steps:
- name: Login to Azure
uses: azure/login@v1
with:
creds: ${{ secrets.TDEI_CORE_AZURE_CREDS }}
- name: Deploy to Dev
uses: azure/webapps-deploy@v2
with:
app-name: ${{ secrets.AZURE_WEBAPP_NAME }}
images: ${{ secrets.REGISTRY_DOMAIN }}/${{ secrets.REGISTRY_REPO }}:${{ github.sha }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions Job or Workflow does not set permissions
runs-on: ubuntu-latest
steps:
- name: Login to Azure
uses: azure/login@v1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'dev_workflow.yaml' step
Uses Step
uses 'azure/login' with ref 'v1', not a pinned commit hash
with:
creds: ${{ secrets.TDEI_CORE_AZURE_CREDS }}
- name: Deploy to Dev
uses: azure/webapps-deploy@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'dev_workflow.yaml' step
Uses Step
uses 'azure/webapps-deploy' with ref 'v2', not a pinned commit hash
runs-on: ubuntu-latest
steps:
- name: Login to Azure
uses: azure/login@v1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'stage_workflow.yaml' step
Uses Step
uses 'azure/login' with ref 'v1', not a pinned commit hash
with:
creds: ${{ secrets.TDEI_CORE_AZURE_CREDS }}
- name: Deploy to Dev
uses: azure/webapps-deploy@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'stage_workflow.yaml' step
Uses Step
uses 'azure/webapps-deploy' with ref 'v2', not a pinned commit hash
@sujata-m sujata-m merged commit b45e5fb into dev Feb 11, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants