Merge pull request #17 from Kerosene-Labs/update-workflow

Update workflow

.github/workflows/build_deploy.yml → .github/workflows/sdlc.yml

@@ -1,4 +1,4 @@
-name: Build and Deploy
+name: SDLC
 on:
   release:
     types:
@@ -8,11 +8,27 @@ on:
       - main
 
 jobs:
+  codeql:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: 'java,css,html,js'  # Specify your project's languages
+          # database: './codeql-db'  # Optional: Customize the database location
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
+        with:
+          category: '/language-security-and-quality'  # Customize category if needed
+
   build:
     runs-on: ubuntu-latest
     permissions:
       contents: read
       packages: write
+    needs: 
+      - codeql
     steps:
     - uses: actions/checkout@v4
 

dockerfile

@@ -1,12 +1,13 @@
 FROM ubuntu:24.04
+ARG PROJECT_VERSION=0.0.0
 
 # update, upgrade, install java
 RUN apt-get update && apt-get upgrade -y
 RUN apt-get install openjdk-21-jre-headless -y
 
 # copy the app
 RUN mkdir /app
-COPY billtracker-0.0.1.jar /app/app.jar
+COPY billtracker-${PROJECT_VERSION}.jar /app/app.jar
 
 # run the app
 WORKDIR /app