Merge pull request #109 from Qlever-LLC/dependabot/npm_and_yarn/axios… #413

	# Copyright 2022 Qlever LLC
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,
	# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	# See the License for the specific language governing permissions and
	# limitations under the License.

	name: Build, test, and push service images

	on:
	push:
	pull_request:

	jobs:
	yarn:
	name: yarn CI
	uses: qlever-llc/workflows/.github/workflows/build-and-publish-package.yml@master
	secrets:
	npm_token: ${{ secrets.NPM_AUTH_TOKEN }}
	with:
	# Remove this line if your tests don't need an OADA instance
	oada: true
	publish: false
	docker:
	name: Docker CI
	# Wait for yarn tests to pass?
	# needs:
	# - yarn
	uses: qlever-llc/workflows/.github/workflows/build-and-push-service.yml@master
	secrets:
	dockerhub_username: ${{ secrets.DOCKERHUB_USERNAME }}
	dockerhub_repo: ${{ secrets.DOCKER_REPO }}
	snyk_org: ${{ secrets.SNYK_ORG }}
	# Actual secrets
	dockerhub_token: ${{ secrets.DOCKERHUB_TOKEN }}
	snyk_token: ${{ secrets.SNYK_TOKEN }}
	cosign_key: ${{ secrets.COSIGN_KEY }}
	cosign_password: ${{ secrets.COSIGN_PASSWORD }}

Provide feedback