Security Improvement

Author: leosandoval-gnoss

.github/workflows/BuildImageCacheRefresh.yml

@@ -0,0 +1,42 @@
+name: BuildImageCacheRefresh
+
+on:
+  push:
+    tags:
+      - "*"
+
+jobs:
+  build-push-image:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Check out current project
+      uses: actions/checkout@v4
+      with:
+        path: ./Gnoss.BackgroundTask.CacheRefresh.OpenCORE
+
+    - name: check out commons
+      uses: actions/checkout@v4
+      with:
+        repository: equipognoss/Gnoss.Commons.OpenCORE
+        path: ./Gnoss.Commons
+        ref: main
+
+    - name: Login to Docker Hub
+      uses: docker/login-action@v3
+      with:
+        username: ${{ secrets.DOCKERHUB_USERNAME }}
+        password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+    - name: Get the tag name
+      id: get_version
+      run: echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
+
+    - name: Build and push Docker image
+      uses: docker/build-push-action@v6
+      with:
+        context: .
+        file: ./Gnoss.BackgroundTask.CacheRefresh.OpenCORE/Dockerfile
+        push: true
+        tags: |
+          ${{ secrets.DOCKER_IMAGE_NAME }}:${{ steps.get_version.outputs.VERSION }}

.github/workflows/Sonar.yml

@@ -29,14 +29,14 @@ jobs:
           mv Gnoss.BackgroundTask.CacheRefresh.OpenCORE/Gnoss.Commons Gnoss.Commons
           cd Gnoss.BackgroundTask.CacheRefresh.OpenCORE
       - name: Cache SonarCloud packages
-        uses: actions/cache@v1
+        uses: actions/cache@v4
         with:
           path: ~\sonar\cache
           key: ${{ runner.os }}-sonar
           restore-keys: ${{ runner.os }}-sonar
       - name: Cache SonarCloud scanner
         id: cache-sonar-scanner
-        uses: actions/cache@v1
+        uses: actions/cache@v4
         with:
           path: .\.sonar\scanner
           key: ${{ runner.os }}-sonar-scanner

Dockerfile

@@ -9,13 +9,11 @@ RUN apt-get update && apt-get install -y --no-install-recommends curl
 
 WORKDIR /app
 
-COPY Gnoss.BackgroundTask.CacheRefresh/*.csproj ./
-
-RUN dotnet restore
-
 COPY . ./
 
-RUN dotnet publish Gnoss.BackgroundTask.CacheRefresh/Gnoss.BackgroundTask.CacheRefresh.csproj -c Release -o out
+RUN dotnet restore Gnoss.BackgroundTask.CacheRefresh.OpenCORE/Gnoss.BackgroundTask.CacheRefresh/Gnoss.BackgroundTask.CacheRefresh.csproj
+
+RUN dotnet publish Gnoss.BackgroundTask.CacheRefresh.OpenCORE/Gnoss.BackgroundTask.CacheRefresh/Gnoss.BackgroundTask.CacheRefresh.csproj -c Release -o out
 
 FROM mcr.microsoft.com/dotnet/aspnet:8.0