Lpampolha/desafio nivel 3

.github/workflows/02-tests-ci.yml

@@ -7,7 +7,7 @@ env:
   NODE_VERSION: '18'
   CHALLENGE_LEVEL: 2
   CHALLENGE_NAME: "testes-automatizados"
-  COVERAGE_MIN: 80 # Cobertura mínima exigida em porcentagem
+  COVERAGE_MIN: 99 # Cobertura mínima exigida em porcentagem
 
 jobs:
   tests-and-coverage:
@@ -20,18 +20,28 @@ jobs:
       - name: "Checkout do código"
         uses: actions/checkout@v4
 
-      # INSIRA AQUI A LÓGICA PARA RODAR OS TESTES E VERIFICAR A COBERTURA
-      ###
-      ###
-      ###
+      - name: "Setup Node"
+        uses: actions/setup-node@v5
+        with:
+          node-version: ${{env.NODE_VERSION}}
+
+      - name: "Instalar dependências"
+        run: npm ci
+      - name: "Executar testes"
+        run: npm run tests
 
       - name: "Extrair porcentagem de cobertura" # Esse step será validado pelo desafio, não altere o nome. No final, ele deve gerar o output "coverage" com a porcentagem de cobertura.
         id: coverage
         run: |
           COVERAGE=$(npx nyc report --reporter=text-summary | grep -oP 'Statements\s*:\s*\K[0-9\.]+(?=%)' | head -1)
           echo "Coverage: $COVERAGE%"
           echo "coverage=$COVERAGE" >> $GITHUB_OUTPUT
-
+
+      - name: "Validar se os testes passaram"
+        if: ${{steps.coverage.outputs.coverage < env.COVERAGE_MIN}}
+        run: |
+          echo "Cobertura mínima não atendida: Esperado - ${{ env.COVERAGE_MIN }}%. Atingido: ${{ steps.coverage.outputs.coverage }}%"
+          exit 1
   generate-certificate: # DAQUI PARA BAIXO, NÃO ALTERAR
       name: "Desafio Nível 2 - Certificado"
       runs-on: ubuntu-latest

.github/workflows/03-build-containers.yml

@@ -17,11 +17,49 @@ env:
 jobs:
   build-scan-and-push:
     name: "Build, Lint, Trivy Scan e Push no GHCR"
-    if: #????
+    if: github.event.pull_request.merged == true
     runs-on: ubuntu-latest
 
     steps:
-      # AQUI VAI O CÓDIGO DO DESAFIO :)
+      - name: Checkout do código
+        uses: actions/checkout@v3
+
+      - name: Login no GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build da imagem Docker
+        run: |
+          docker build -t ghcr.io/${{ github.actor }}/${{ vars.IMAGE_NAME }}:${{ github.sha }} .
+
+      - name: Lint do Dockerfile com Hadolint
+        run: |
+          hadolint Dockerfile --format tty | tee lint-report.txt
+          if grep -q "DL3006\|DL3008" lint-report.txt; then
+            exit 1
+          fi
+
+      - name: Scan de vulnerabilidades com Trivy
+        uses: aquasecurity/trivy-action@0.28.0
+        with:
+          image-ref: ghcr.io/${{ github.actor }}/${{ vars.IMAGE_NAME }}:${{ github.sha }}
+          format: sarif
+          output: trivy-report.txt
+          severity: CRITICAL
+          exit-code: 1
+
+      - name: Publicar imagem no GHCR
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ghcr.io/${{ github.actor }}/${{ vars.IMAGE_NAME }}:${{ github.sha }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
   generate-certificate: # DAQUI PARA BAIXO, NÃO ALTERAR
     name: "Desafio Nível 3 - Certificado"

package.json

@@ -19,16 +19,16 @@
   "author": "LINUXtips",
   "license": "MIT",
   "dependencies": {
-    "express": "^4.18.2",
     "cors": "^2.8.5",
-    "helmet": "^7.0.0",
     "dotenv": "^16.3.1",
+    "express": "^4.21.2",
+    "helmet": "^7.0.0",
     "node-fetch": "^3.3.2"
   },
   "devDependencies": {
     "jest": "^29.7.0",
-    "supertest": "^6.3.4",
-    "nyc": "^17.1.0"
+    "nyc": "^17.1.0",
+    "supertest": "^6.3.4"
   },
   "engines": {
     "node": ">=16.0.0"