Create FUNDING.yml #14

	name: CI

	on:
	push:
	branches: [main]
	pull_request:

	permissions:
	contents: read
	packages: write
	security-events: write

	jobs:
	backend:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-java@v4
	with:
	distribution: temurin
	java-version: "21"
	cache: maven
	- name: Test
	run: mvn -B test
	- name: Production profile smoke test
	run: mvn -B -DskipTests package
	- name: Build container
	run: docker build -t sovereign-comm-platform:${{ github.sha }} .
	- name: Generate SBOM
	run: docker scout sbom sovereign-comm-platform:${{ github.sha }} --format spdx --output sbom.spdx.json \|\| true
	- name: Upload SBOM
	uses: actions/upload-artifact@v4
	with:
	name: sbom
	path: sbom.spdx.json
	if-no-files-found: ignore

	security-verifier:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version: "1.22"
	- name: Test verifier
	working-directory: crypta-security-verifier
	run: go test ./...
	- name: Build verifier container
	run: docker build -t crypta-security-verifier:${{ github.sha }} crypta-security-verifier

	k8s-manifests:
	runs-on: ubuntu-latest
	needs: [backend, security-verifier]
	steps:
	- uses: actions/checkout@v4
	- uses: imranismail/setup-kustomize@v2
	- name: Render manifests
	run: kustomize build k8s/base >/tmp/sovereign-comm.yaml

Navigation Menu