docs: add CloudShare author attribution and MIT license #9

	name: CI

	# PR и push в main выполняются на GitHub-hosted runner (ubuntu-latest):
	# чужие PR никогда не попадают на self-hosted runner (docs/security.md).
	on:
	pull_request:
	push:
	branches: [main]

	jobs:
	test:
	name: Maven test
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-java@v4
	with:
	distribution: temurin
	java-version: "17"
	cache: maven

	- name: Run tests (unit + coverage gate)
	run: mvn -B verify --file cloudshare-app/pom.xml

	image-scan:
	name: Docker build + security gate
	runs-on: ubuntu-latest
	needs: test
	steps:
	- uses: actions/checkout@v4

	# Сборка без публикации: валидация образа (README §37).
	# Финальный arm64-артефакт собирается в docker.yml на self-hosted runner.
	- name: Build image
	run: docker build -t cloudshare:ci cloudshare-app

	- name: Trivy security scan (gate)
	uses: aquasecurity/trivy-action@v0.36.0
	with:
	image-ref: cloudshare:ci
	severity: CRITICAL,HIGH
	exit-code: "1"
	ignore-unfixed: true

Navigation Menu