CGBPNW-651: Updated steps.lib.yml and job_scan_code_net.lib.yml to support Nuget credentials (#48)

Author: mikhail-petrusheuski-covergo

.gflows/libs/job_scan_code_net.lib.yml

@@ -7,7 +7,7 @@
 
 #@ for unit_test_section in getattr(sections,"unit_test",[]):
 #@ test_result_artifacts.append("{} results".format(unit_test_section.name))
-#@ end 
+#@ end
 
 #@ if hasattr(sections,"integration_test") :
   #@ for integration_test_definition in sections.integration_test:
@@ -19,6 +19,12 @@
   uses: actions/checkout@v3
   with:
     fetch-depth: 0
+- name: Add GitHub Packages to NuGet config
+  env:
+    GH_ACCOUNT: ${{ secrets.PAT_USER_READ_PACKAGES }}
+    GH_TOKEN: ${{ secrets.PAT_READ_PACKAGES }}
+  run: |
+    dotnet nuget update source github --username ${GH_ACCOUNT} --password ${GH_TOKEN} --store-password-in-clear-text
 - name: Scan
   uses: NazmiAltun/[email protected]
   with:

.gflows/libs/steps.lib.yml

@@ -114,6 +114,8 @@ with:
   #@ end
   #@ build_args.append("COMMIT_SHA=${{ github.sha }}")
   #@ build_args.append("GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}")
+  #@ build_args.append("GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}")
+  #@ build_args.append("GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}")
   #@ if build_versioned_image:
   #@ build_args.append("BUILD_DATETIME=${{ steps.meta.outputs.json && fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}")
   #@ build_args.append("APP_VERSION=${{ needs.version.outputs.app_version }}")

github-sample/workflows/build-publish.yml

@@ -67,6 +67,12 @@ jobs:
       uses: actions/checkout@v3
       with:
         fetch-depth: 0
+    - name: Add GitHub Packages to NuGet config
+      env:
+        GH_ACCOUNT: ${{ secrets.PAT_USER_READ_PACKAGES }}
+        GH_TOKEN: ${{ secrets.PAT_READ_PACKAGES }}
+      run: |
+        dotnet nuget update source github --username ${GH_ACCOUNT} --password ${GH_TOKEN} --store-password-in-clear-text
     - name: Scan
       uses: NazmiAltun/[email protected]
       with:
@@ -132,6 +138,8 @@ jobs:
         build-args: |-
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
           BUILD_DATETIME=${{ steps.meta.outputs.json && fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
           APP_VERSION=${{ needs.version.outputs.app_version }}
           FILE_VERSION=${{ needs.version.outputs.file_version }}
@@ -206,6 +214,8 @@ jobs:
         build-args: |-
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
           BUILD_DATETIME=${{ steps.meta.outputs.json && fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
           APP_VERSION=${{ needs.version.outputs.app_version }}
           FILE_VERSION=${{ needs.version.outputs.file_version }}
@@ -293,6 +303,8 @@ jobs:
           NOW="$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
           BUILD_DATETIME=${{ steps.meta.outputs.json && fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
           APP_VERSION=${{ needs.version.outputs.app_version }}
           FILE_VERSION=${{ needs.version.outputs.file_version }}
@@ -344,6 +356,8 @@ jobs:
         build-args: |-
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
           BUILD_DATETIME=${{ steps.meta.outputs.json && fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
           APP_VERSION=${{ needs.version.outputs.app_version }}
           FILE_VERSION=${{ needs.version.outputs.file_version }}
@@ -389,6 +403,8 @@ jobs:
         build-args: |-
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
         provenance: "false"
     - name: Image digest
       run: echo ${{ steps.docker-build-auth-test-unit.outputs.digest }}
@@ -481,6 +497,8 @@ jobs:
         build-args: |-
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
         provenance: "false"
     - name: Image digest
       run: echo ${{ steps.docker-build-integration-tests.outputs.digest }}
@@ -589,6 +607,8 @@ jobs:
         build-args: |-
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
         provenance: "false"
     - name: Image digest
       run: echo ${{ steps.docker-build-acceptance-tests.outputs.digest }}
@@ -739,6 +759,8 @@ jobs:
         build-args: |-
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
         provenance: "false"
     - name: Image digest
       run: echo ${{ steps.docker-build-api-test-integration.outputs.digest }}
@@ -1179,6 +1201,8 @@ jobs:
         build-args: |-
           COMMIT_SHA=${{ github.sha }}
           GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          GH_ACCOUNT=${{ secrets.PAT_USER_READ_PACKAGES }}
+          GH_TOKEN=${{ secrets.PAT_READ_PACKAGES }}
         provenance: "false"
     - name: Image digest
       run: echo ${{ steps.docker-build-auth-mongo.outputs.digest }}