Skip to content

Chore: CI 파이프라인 추가 #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dungbik merged 2 commits into from
Feb 9, 2026
Merged

Chore: CI 파이프라인 추가 #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1638e6d
Chore: CI 파이프라인 추가
dungbik Feb 9, 2026
551785f
Chore: Test 실패 해결
dungbik Feb 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
56 changes: 56 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
name: CI

on:
push:
branches:
- main
pull_request:
branches:
- main

jobs:
build:
runs-on: ubuntu-latest

steps:
- name: Checkout code
uses: actions/checkout@v4

- name: Set up JDK 21
uses: actions/setup-java@v4
with:
java-version: '21'
distribution: 'temurin'

- name: Setup Gradle
uses: gradle/actions/setup-gradle@v4

- name: Grant execute permission for gradlew
run: chmod +x gradlew

- name: Build with Gradle
run: ./gradlew build -x test

- name: Run tests
run: ./gradlew test

dependency-check:
runs-on: ubuntu-latest

steps:
- name: Checkout code
uses: actions/checkout@v4

- name: Run dependency check
uses: dependency-check/Dependency-Check_Action@main
with:
project: 'FlipNote-Gateway'
path: '.'
format: 'HTML'
Comment on lines +44 to +49
Copy link

@coderabbitai coderabbitai bot Feb 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🌐 Web query:

dependency-check/Dependency-Check_Action latest release version GitHub

💡 Result:

The latest GitHub release of dependency-check/Dependency-Check_Action is v1.1.0, published April 28, 2021. [1] (It’s also listed as the latest on the GitHub Marketplace entry for the action.) [2]

dependency-check/Dependency-Check_Action@main을 버전 태그로 고정하세요.

@main 브랜치를 참조하면 업스트림 변경이 예기치 않게 CI 파이프라인에 영향을 미칠 수 있습니다(공급망 보안 위험). 현재 최신 안정 버전인 @v1.1.0으로 고정하세요.

수정 예시 
      - name: Run dependency check
-        uses: dependency-check/Dependency-Check_Action@main
+        uses: dependency-check/Dependency-Check_Action@v1.1.0
         with:
           project: 'FlipNote-Gateway'
           path: '.'
           format: 'HTML'
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- name: Run dependency check
uses: dependency-check/Dependency-Check_Action@main
with:
project: 'FlipNote-Gateway'
path: '.'
format: 'HTML'
- name: Run dependency check
uses: dependency-check/Dependency-Check_Action@v1.1.0
with:
project: 'FlipNote-Gateway'
path: '.'
format: 'HTML'
🤖 Prompt for AI Agents 
In @.github/workflows/ci.yml around lines 44 - 49, Replace the unstable
reference to the dependency-check action (the line using
dependency-check/Dependency-Check_Action@main) with a fixed version tag to
prevent upstream changes from affecting CI—change the action ref from `@main` to
the stable tag (e.g., `@v1.1.0`) in the workflow step named "Run dependency
check".


- name: Upload dependency check report
uses: actions/upload-artifact@v4
if: always()
with:
name: dependency-check-report
path: reports/
2 changes: 2 additions & 0 deletions src/test/resources/application.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
jwt:
secret: "55ca298dcfc216e215622e3f48a251abaa4e8bb973074f065ab170e311acc15811d01a2407290c3ac143648196306d4a6f666a4ed364d3df633e08eb184bb0aea0f2edde4fd2d7fa68ea95ddbc421ff532ce47bde775975911042d665bc22d88a9fa26a03bb4d25530b8cdeb1247d87c9e3efcd721e368b0566b00a43308a729"