-
Notifications
You must be signed in to change notification settings - Fork 0
Refactored DB Update #29
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
WalkthroughThis pull request updates the CI/CD workflow configuration to enhance tool reliability and build robustness. Changes include splitting the test script into separate steps, pinning EF Core CLI to version 10.0.1, and updating the database update command with an explicit startup project path. Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Possibly related PRs
Suggested reviewers
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
mblebelo
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All checks passed and conversations resolved ✅
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 1
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (1)
.github/workflows/ci-cd.yml (1)
64-85: CRITICAL: Production database credentials exposed in version control—rotate immediately.The repository contains plaintext production database credentials in
aspnet-core/src/Moipone.PublicSite.Web.Host/appsettings.json(PostgreSQL username=benny with plaintext password). This file is committed to version control and must be remediated:
- Immediately rotate the exposed database credentials (Render.com PostgreSQL).
- Remove hardcoded credentials from all appsettings files.
- Fix the workflow configuration issue: The
DbContextFactorydoes not read theASPNETCORE_ENVIRONMENTvariable when selecting which config file to load. It always loads the defaultappsettings.json. The factory must pass the environment name toAppConfigurations.Get():var configuration = AppConfigurations.Get( WebContentDirectoryFinder.CalculateContentRootFolder(), + Environment.GetEnvironmentVariable("ASPNETCORE_ENVIRONMENT") );
Verify the startup project path in the workflow. The path
../Moipone.PublicSite.HttpApi.Hostdoes not exist; the projects inaspnet-core/src/are: Application, Core, EntityFrameworkCore, Migrator, Web.Core, and Web.Host.Use GitHub Secrets or environment-based configuration for production credentials instead of storing them in appsettings files.
🤖 Fix all issues with AI agents
In @.github/workflows/ci-cd.yml:
- Around line 115-118: The Deploy application step's curl invocation currently
won't fail on HTTP 4xx/5xx responses; update the curl command used in the
"Deploy application" job to include the --fail flag (optionally with
-sS/--show-error for clearer output) so the GitHub Actions step fails when the
webhook returns an HTTP error; modify the curl invocation referenced as the
deployment command in that step accordingly.
mblebelo
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All checks passed and conversations resolved ✅
Summary by CodeRabbit
✏️ Tip: You can customize this high-level summary in your review settings.