Watermark Sichtbare Wasserzeichen

.github/workflows/formr-docker-image.yaml

@@ -0,0 +1,89 @@
+name: Formr Docker Image CI
+
+on:
+  push:
+    branches: [ "*" ]
+    paths-ignore:
+      - 'docker/**'
+      - '.github/workflows/opencpu-docker-image.yaml'
+  workflow_dispatch:
+
+env:
+  REGISTRY: ghcr.io
+  NAME: ${{ github.repository }}
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Environment
+        run: |
+          echo "IMAGE_TAG=$REGISTRY/$NAME:${GITHUB_REF##*/}-snapshot" >> "$GITHUB_ENV"
+
+      - name: Cache Packages
+        uses: actions/cache@v1
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+
+      - name: Docker Build
+        run: docker image build . -f ./Dockerfile --tag $IMAGE_TAG
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{github.actor}}
+          password: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Docker Push
+        run: docker push $IMAGE_TAG
+
+  scout:
+    needs: [build]
+    name: Dependency Analysis
+
+    runs-on: ubuntu-latest
+
+    steps:
+
+      - name: Setup Enviroment
+        run: |
+          echo "IMAGE_TAG=$REGISTRY/$NAME:${GITHUB_REF##*/}-snapshot" >> "$GITHUB_ENV"
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{github.actor}}
+          password: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Docker Pull
+        run: docker pull $IMAGE_TAG
+
+      - name: Login to docker.io # Needed for docker scout
+        uses: docker/login-action@v1
+        with:
+          registry: docker.io
+          username: ${{secrets.DOCKER_USERNAME}}
+          password: ${{secrets.DOCKER_PASSWORD}}
+
+      - name: Analyze for critical and high CVEs
+        id: docker-scout-cves
+        uses: docker/scout-action@v1
+        with:
+          command: cves
+          image: ${{ env.IMAGE_TAG }}
+          sarif-file: sarif.output.json
+          summary: true
+
+      - name: Upload SARIF result
+        id: upload-sarif
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: sarif.output.json
+          category: Formr

.github/workflows/opencpu-docker-image.yaml

@@ -0,0 +1,82 @@
+name: OpenCPU Docker Image CI
+
+on:
+  push:
+    branches: [ "*" ]
+    paths:
+      - 'docker/opencpu'
+      - '.github/workflows/opencpu-docker-image.yaml'
+  workflow_dispatch:
+
+env:
+  REGISTRY: ghcr.io
+  NAME: timed-and-secured-assets/opencpu
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Environment
+        run: |
+          echo "IMAGE_TAG=$REGISTRY/$NAME:${GITHUB_REF##*/}-snapshot" >> "$GITHUB_ENV"
+
+      - name: Cache Packages
+        uses: actions/cache@v1
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+
+      - name: Docker Build
+        run: docker image build . -f ./opencpu/Dockerfile --tag $IMAGE_TAG
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{github.actor}}
+          password: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Docker Push
+        run: docker push $IMAGE_TAG
+
+  scout:
+    needs: [build]
+    name: Dependency Analysis
+
+    runs-on: ubuntu-latest
+
+    steps:
+
+      - name: Setup Enviroment
+        run: |
+          echo "IMAGE_TAG=$REGISTRY/$NAME:${GITHUB_REF##*/}-snapshot" >> "$GITHUB_ENV"
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{github.actor}}
+          password: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Docker Pull
+        run: docker pull $IMAGE_TAG
+
+      - name: Login to docker.io # Needed for docker scout
+        uses: docker/login-action@v1
+        with:
+          registry: docker.io
+          username: ${{secrets.DOCKER_USERNAME}}
+          password: ${{secrets.DOCKER_PASSWORD}}
+
+      - name: Analyze for critical and high CVEs
+        id: docker-scout-cves
+        uses: docker/scout-action@v1
+        with:
+          command: cves
+          image: ${{ env.IMAGE_TAG }}
+          sarif-file: sarif.output.json
+          summary: true

.github/workflows/release.yaml

@@ -0,0 +1,86 @@
+name: Release Workflow
+
+on:
+  release:
+    types: [published]
+env:
+  REGISTRY: ghcr.io
+  NAME: ${{ github.repository }}
+  NAME_OPENCPU: timed-and-secured-assets/opencpu
+
+jobs:
+  build-formr:
+    name: Build Formr
+    runs-on: ubuntu-latest
+    steps:
+      - name: Setup Environment
+        run: |
+          echo "IMAGE_TAG=$REGISTRY/$NAME:${GITHUB_REF#refs/tags/}" >> "$GITHUB_ENV"
+
+      - uses: actions/checkout@v3
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Cache Packages
+        uses: actions/cache@v1
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{github.actor}}
+          password: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Build and Push
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ env.IMAGE_TAG }}
+
+  build-opencpu:
+    name: Build Open-CPU
+    runs-on: ubuntu-latest
+    steps:
+      - name: Setup Environment
+        run: |
+          echo "IMAGE_TAG=$REGISTRY/$NAME_OPENCPU:${GITHUB_REF#refs/tags/}" >> "$GITHUB_ENV"
+
+      - uses: actions/checkout@v3
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Cache Packages
+        uses: actions/cache@v1
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{github.actor}}
+          password: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Build and Push
+        uses: docker/build-push-action@v5
+        with:
+          context: ./opencpu
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ env.IMAGE_TAG }}

.gitignore

@@ -27,10 +27,12 @@ formr-package/man
 webroot/assets/img
 tests/test.php
 nohup.out
+webroot/*.html
 webroot/assets/*.mp4
 webroot/assets/*.html
-
 webroot/assets/bower_components
 webroot/assets/lib/bower_components
-
+/bin/migra.php
 /*.key
+docker/db/*
+.idea/