[pull] master from kiwitcms:master

.circleci/config.yml

@@ -21,11 +21,48 @@ jobs:
       - run: pip3 install tcms-api
       - run: make test-docker-image
 
+  aarch64-build-and-push-docker-image:
+    machine:
+      # https://circleci.com/docs/2.0/configuration-reference/#available-machine-images
+      image: ubuntu-2004:202111-02
+    resource_class: arm.medium
+    # Add steps to the job
+    # See: https://circleci.com/docs/2.0/configuration-reference/#steps
+    steps:
+      - checkout
+      - run: |
+            uname -a
+            python3 --version
+            # fail if not using Python 3
+            python3 --version | grep "3\."
+
+            VERSION=$(python3 -m tcms)
+
+            make docker-image
+            docker tag kiwitcms/kiwi:latest quay.io/kiwitcms/version:$VERSION-$(uname -m)
+
+            echo "+++++ Docker images +++++"
+            docker images
+
+            echo "$QUAY_PUSH_TOKEN" | docker login -u="$QUAY_PUSH_USERNAME" --password-stdin quay.io
+            docker push quay.io/kiwitcms/version:$VERSION-$(uname -m)
+            docker logout quay.io
+
+
 # Invoke jobs via workflows
 # See: https://circleci.com/docs/2.0/configuration-reference/#workflows
 workflows:
-  aarch64-docker:
+  aarch64-docker-test:
     when:
       matches: { pattern: "^prepare/v.+$", value: << pipeline.git.branch >> }
     jobs:
       - aarch64-test-docker-image
+
+  aarch64-docker-release:
+    jobs:
+      - aarch64-build-and-push-docker-image:
+          filters:
+            tags:
+              only: /^v.+$/
+            branches:
+              ignore: /.*/

.github/CODE_OF_CONDUCT.md

@@ -30,9 +30,9 @@ Conduct may be permanently removed from the project team.
 This code of conduct applies both within project spaces and in public spaces
 when an individual is representing the project or its community.
 
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported 
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported
 by opening an issue or contacting one or more of the project maintainers.
 
 This Code of Conduct is adapted from the Contributor Covenant
 (http://contributor-covenant.org), version 1.2.0, available at
-http://contributor-covenant.org/version/1/2/0/
+http://contributor-covenant.org/version/1/2/0/

.github/dependabot.yml

@@ -1,15 +1,44 @@
 version: 2
+
 updates:
-- package-ecosystem: pip
-  directory: "/"
-  schedule:
-    interval: daily
-    time: "03:00"
-  open-pull-requests-limit: 10
-
-- package-ecosystem: npm
-  directory: "/"
-  schedule:
-    interval: daily
-    time: "03:00"
-  open-pull-requests-limit: 10
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: daily
+      time: "03:00"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: npm
+    directory: "/tcms"
+    schedule:
+      interval: daily
+      time: "03:00"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      time: "04:00"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      time: "04:00"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: "docker"
+    directory: "/tests/redmine/"
+    schedule:
+      interval: "weekly"
+      time: "04:00"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: "docker"
+    directory: "/tests/bugzilla/"
+    schedule:
+      interval: "weekly"
+      time: "04:00"
+    open-pull-requests-limit: 5

.github/workflows/changelog.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
     - name: check-source-branch-and-modified-files
       run: |
@@ -24,7 +24,7 @@ jobs:
         # if this PR modifies the CHANGELOG file it needs to come from a branch
         # that follows the pattern 'prepare/vX.Y' b/c we want to run some extra jobs for such branches!
         if curl -o- -L "${{ github.event.pull_request.diff_url }}" 2>/dev/null | grep "^diff --git" | grep "CHANGELOG"; then
-            if [[ ! "${{ github.head_ref }}" =~ "^prepare/v.+$" ]]; then
+            if [[ ! "${{ github.head_ref }}" =~ ^prepare/v.+$ ]]; then
                 echo "FAIL: Modifications to CHANGELOG are only accepted from 'prepate/vX.Y' branches!"
                 echo "INFO: Otherwise aarch64 jobs in Circle CI will not be executed."
                 exit 1

.github/workflows/codeql.yml

@@ -0,0 +1,42 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+  schedule:
+    - cron: "18 4 * * 0"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ javascript, python ]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: ${{ matrix.language }}
+          queries: +security-and-quality
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+        if: ${{ matrix.language == 'javascript' || matrix.language == 'python' }}
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
+        with:
+          category: "/language:${{ matrix.language }}"

.github/workflows/coverity_scan.yml

@@ -0,0 +1,53 @@
+name: Coverity Scan
+
+on:
+  # https://docs.github.com/en/actions/learn-github-actions/events-that-trigger-workflows#scheduled-events
+  schedule:
+    - cron: '0 6 * * *' # Daily at 06:00 UTC
+  workflow_dispatch:
+
+jobs:
+  scan:
+    name: "coverity scan"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Clone repository
+        uses: actions/checkout@v3
+
+      - name: Set up Python 3.9
+        uses: actions/setup-python@v4
+        with:
+          python-version: 3.9
+
+      - name: Install depenencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install gettext
+
+          pip install -r requirements/base.txt
+          pushd tcms/ && ./npm-install && popd
+
+      - name: Run Coverity Scan script
+        env:
+          COVERITY_SCAN_PROJECT_NAME: kiwitcms/Kiwi
+          COVERITY_SCAN_TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}
+          COVERITY_SCAN_EMAIL: ${{ secrets.COVERITY_SCAN_EMAIL }}
+        run: |
+          echo "Downloading coverity scan package."
+          curl -o /tmp/cov-analysis-linux64.tgz https://scan.coverity.com/download/linux64 \
+            --form project="$COVERITY_SCAN_PROJECT_NAME" \
+            --form token="$COVERITY_SCAN_TOKEN"
+
+          pushd /tmp && tar xzvf cov-analysis-linux64.tgz && popd
+          mkdir bin
+
+          /tmp/cov-analysis-linux64-*/bin/cov-build --dir cov-int --no-command --fs-capture-search ./ --fs-capture-search $(python -c 'from distutils.sysconfig import get_python_lib; print(get_python_lib())')
+          tar cfz cov-int.tar.gz cov-int
+
+          echo "Uploading coverity scan result to http://scan.coverity.com"
+          curl https://scan.coverity.com/builds?project="$COVERITY_SCAN_PROJECT_NAME" \
+            --form token="$COVERITY_SCAN_TOKEN" \
+            --form email="$COVERITY_SCAN_EMAIL" \
+            --form [email protected] \
+            --form version="$(git rev-parse HEAD)" \
+            --form description="$GITHUB_REF / $GITHUB_SHA"

.github/workflows/docker.yml

@@ -0,0 +1,39 @@
+name: docker
+
+on:
+  push:
+    tags:
+      - v*
+
+jobs:
+  build_and_push:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: [3.9]
+
+    steps:
+      - uses: actions/checkout@v3
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Build & push docker images for ${{ github.event.ref }}
+        run: |
+            VERSION=$(python -m tcms)
+
+            make docker-image
+            docker tag kiwitcms/kiwi:latest quay.io/kiwitcms/version:$VERSION-$(uname -m)
+
+            echo "+++++ Docker images +++++"
+            docker images
+
+            echo "${{ secrets.DOCKER_PUSH_TOKEN }}" | docker login -u="${{ secrets.DOCKER_PUSH_USERNAME }}" --password-stdin
+            docker push kiwitcms/kiwi:latest
+            docker logout
+
+            echo "${{ secrets.QUAY_PUSH_TOKEN }}" | docker login -u="${{ secrets.QUAY_PUSH_USERNAME }}" --password-stdin quay.io
+            docker push quay.io/kiwitcms/kiwi:latest
+            docker push quay.io/kiwitcms/version:$VERSION-$(uname -m)
+            docker logout quay.io

.github/workflows/integration_bugtracker.yml

@@ -12,14 +12,14 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: [3.8]
+        python-version: [3.9]
         tracker: [azureboards, bitbucket, bugzilla, github, gitlab_ce, gitlab_ee, gitlab_com, jira, kiwitcms, redmine]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v1
+      uses: actions/setup-python@v4
       with:
         python-version: ${{ matrix.python-version }}
 
@@ -58,6 +58,7 @@ jobs:
         coverage run --source='.' ./manage.py test -v2 --noinput --settings=tcms.settings.test tcms.issuetracker.tests.test_${{ matrix.tracker }}
 
     - name: Send coverage to codecov.io
-      run: |
-        coverage report -m
-        bash <(curl -s https://codecov.io/bash)
+      uses: codecov/codecov-action@v3
+      with:
+        fail_ci_if_error: true
+        verbose: true