aboutsummaryrefslogtreecommitdiff
path: root/backend
diff options
context:
space:
mode:
Diffstat (limited to 'backend')
-rw-r--r--backend/.github/workflows/datadog.yaml37
1 files changed, 37 insertions, 0 deletions
diff --git a/backend/.github/workflows/datadog.yaml b/backend/.github/workflows/datadog.yaml
new file mode 100644
index 0000000..e7418f3
--- /dev/null
+++ b/backend/.github/workflows/datadog.yaml
@@ -0,0 +1,37 @@
+on: [push]
+
+name: Datadog Analysis
+
+jobs:
+ static-analysis:
+ runs-on: ubuntu-latest
+ name: Datadog Static Analyzer
+ steps:
+ - name: Checkout
+ uses: actions/checkout@v3
+ - name: Check code meets quality and security standards
+ id: datadog-static-analysis
+ uses: DataDog/datadog-static-analyzer-github-action@v1
+ with:
+ dd_api_key: ${{ secrets.DD_API_KEY }}
+ dd_app_key: ${{ secrets.DD_APP_KEY }}
+ dd_service: ibd-trader-backend
+ dd_env: ci
+ dd_site: datadoghq.com
+ cpu_count: 2
+
+ software-composition-analysis:
+ runs-on: ubuntu-latest
+ name: Datadog SBOM Generation and Upload
+ steps:
+ - name: Checkout
+ uses: actions/checkout@v3
+ - name: Check imported libraries are secure and compliant
+ id: datadog-software-composition-analysis
+ uses: DataDog/datadog-sca-github-action@main
+ with:
+ dd_api_key: ${{ secrets.DD_API_KEY }}
+ dd_app_key: ${{ secrets.DD_APP_KEY }}
+ dd_service: ibd-trader-backend
+ dd_env: ci
+ dd_site: datadoghq.com