Merge pull request #78 from regulaforensics/CI/improvements

CI. Add Security scanner. Bump action versions

.github/workflows/nuget-publish.yml

@@ -8,10 +8,12 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-dotnet@v1
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup DotNet
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: '3.1.x'
       - run: dotnet pack src/Regula.FaceSDK.WebClient -c Release -p:PackageVersion=${{github.event.release.name}} -p:Version=${{github.event.release.name}}
       - run: dotnet nuget push src/Regula.FaceSDK.WebClient/bin/Release/Regula.FaceSDK.WebClient.${{github.event.release.name}}.nupkg -k ${{secrets.NUGET_AUTH_TOKEN}} -s https://api.nuget.org/v3/index.json
-

.github/workflows/run-smoke-test.yml

@@ -4,17 +4,22 @@ on:
   pull_request:
     branches:
       - master
+      - stable
+      - develop
 
 jobs:
   run_smoke_test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-dotnet@v1
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup DotNet
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: '6.0.x'
       - run: dotnet build src/Regula.FaceSDK.NetCoreExample -c Release
-      - working-directory: src/Regula.FaceSDK.NetCoreExample/bin/Release/net6.0/
-        run: ./Regula.FaceSDK.NetCoreExample
+      - run: ./Regula.FaceSDK.NetCoreExample
+        working-directory: src/Regula.FaceSDK.NetCoreExample/bin/Release/net6.0/
         env:
           API_BASE_PATH: "https://faceapi.regulaforensics.com/"

.github/workflows/sast.yaml

@@ -55,4 +55,3 @@ jobs:
             echo "Bad FAIL_ON_VULNERABILITIES env var value"
             exit 1
           fi
-

.github/workflows/trivy-scan.yaml

@@ -0,0 +1,25 @@
+name: Trivy Scan
+
+on:
+  pull_request:
+    branches:
+      - main
+      - master
+      - stable
+      - develop
+
+jobs:
+  trivy-scan:
+    name: Scanner
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+
+    - name: Run Trivy vulnerability scanner in fs mode
+      uses: aquasecurity/trivy-action@master
+      with:
+        scan-type: 'fs'
+        exit-code: '1'
+        ignore-unfixed: true
+        severity: 'CRITICAL,HIGH,MEDIUM,LOW'