Create A Build Script and Optional SCA Scan Script for FIS-GUI

[pwgit-create]

Description

Task: Create a GitHub Actions Workflow for Building FIS-GUI

Goal: Set up a build script for the FIS-GUI project similar to the one used in the literate-octo-guacamole
repository, but with the command make install instead of make build.

Instructions:

1. Create a new GitHub Actions workflow file named .github/workflows/build.yml.
2. Use the following example as a template:

   name: Build FIS-GUI
   

https://github.com/pwssOrg/literate-octo-guacamole/blob/main/.github/workflows/build.yml

Optional Task: Add SCA Scan Script for FIS-GUI

Goal: Integrate a Security Code Analysis (SCA) scan using Snyk into the GitHub Actions workflow.

Instructions:

1. Create another GitHub Actions workflow file named .github/workflows/snyk-scan.yml.
2. Use the reusable workflow from pwssOrg/reusable-workflows repository.
3. Follow this example as a template:

   name: SCA Scan FIS-GUI

• https://github.com/pwssOrg/reusable-workflows

• https://github.com/pwssOrg/literate-octo-guacamole/blob/main/.github/workflows/snyk-scan.yml

Guide to Obtain a Snyk Token

1. Log in to Snyk:

   • Go to the Snyk website and log in with your credentials.

2. Access API Tokens:

   • Once logged in, click on your profile avatar (top right corner) and select "Account settings".
   • In the left sidebar menu, click on "API tokens".

3. Generate a New Token:

   • Click the "Generate new token" button.
   • Give it a name that helps you identify its purpose (e.g., "CI/CD Build").
   • Optionally, set an expiration date if desired.

4. Copy Your Snyk Token:

   • Once generated, copy the token and store it securely.

5. Add Token to GitHub Secrets:

   • Go to your GitHub repository.
   • Click on Settings > Secrets (in the left sidebar).
   • Click "New repository secret".
   • Name it SNYK_TOKEN and paste the copied token into the value field.
   • Save the secret.

Additional Notes:

• The project's POM file is located in the root directory, so use './' as the path for Snyk scan.
• For more details on reusable workflows, refer to the reusable-workflows
  repository.

Example Repositories:

• Build Script Template: https://github.com/pwssOrg/literate-octo-guacamole/blob/main/.github/workflows/build.yml
• Snyk Scan Example: https://github.com/pwssOrg/literate-octo-guacamole/blob/main/.github/workflows/snyk-scan.yml