Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OPSEXP-2121 Add kics scan #947

Merged
merged 12 commits into from
Sep 25, 2024
Merged

OPSEXP-2121 Add kics scan #947

Changes from 10 commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
28a155f
OPSEXP-2121 Add kics scan
pmacius Sep 23, 2024
cb37516
add permission to comment on PR
pmacius Sep 23, 2024
466463c
add sarif report
pmacius Sep 23, 2024
1a5b734
remove molecule from the scan
pmacius Sep 23, 2024
bfcb684
use only job summary not comment on pr
pmacius Sep 24, 2024
c7fc783
test annotations on diff
pmacius Sep 24, 2024
8f36d7e
test annotations on diff
pmacius Sep 24, 2024
fe50b57
test annotations on diff
pmacius Sep 24, 2024
c7e1127
test positives
pmacius Sep 24, 2024
737cbb6
remove postivies
pmacius Sep 24, 2024
3862faa
review
pmacius Sep 25, 2024
51653ba
try without permissions
pmacius Sep 25, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 40 additions & 0 deletions .github/workflows/kics.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
name: kics

on:
pull_request:
branches: [master]
paths-ignore:
- "docs/**"
- "*.md"
- .github/workflows/docs.yml
- .pre-commit-config.yaml
pmacius marked this conversation as resolved.
Show resolved Hide resolved
push:
branches: [master]
paths-ignore:
- "docs/**"
- "*.md"
- .github/workflows/docs.yml
- .pre-commit-config.yaml
gionn marked this conversation as resolved.
Show resolved Hide resolved

permissions:
pull-requests: write
contents: write
gionn marked this conversation as resolved.
Show resolved Hide resolved

jobs:
kics:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: run kics Scan
pmacius marked this conversation as resolved.
Show resolved Hide resolved
uses: checkmarx/kics-github-action@530ac1f8efe6202b0f12c9a6e952597ae707b755 # v2.1.2
with:
path: 'playbooks,roles'
pmacius marked this conversation as resolved.
Show resolved Hide resolved
ignore_on_exit: results
output_path: report-dir/
output_formats: 'sarif'
token: ${{ secrets.GITHUB_TOKEN }}
enable_jobs_summary: true
pmacius marked this conversation as resolved.
Show resolved Hide resolved
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@323f5ef653b88011bf10e9a0a56d70d742463c9a # v3.26.8
with:
sarif_file: report-dir/results.sarif
Loading