forked from Azure/bicep-registry-modules
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
672 changed files
with
68,429 additions
and
22,397 deletions.
There are no files selected for viewing
Validating CODEOWNERS rules …
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -131,6 +131,35 @@ runs: | |
| source: "${{ inputs.psrulePath}}/.ps-rule/" # Path to folder containing suppression rules to use for analysis. | ||
| summary: false # Disabling as taken care in customized task | ||
|
|
||
| - name: Run PSRule analysis - Security Pillar Only (Custom Security Pillar) | ||
| uses: microsoft/[email protected] | ||
| if: ${{ inputs.psruleBaseline == 'CB.AVM.WAF.Security' }} | ||
| with: | ||
| modules: "PSRule.Rules.Azure" | ||
| prerelease: true | ||
| baseline: "${{ inputs.psruleBaseline }}" | ||
| inputPath: "${{ inputs.templateFilePath}}" | ||
| outputFormat: Csv | ||
| outputPath: "${{ inputs.templateFilePath}}-PSRule-output.csv" | ||
| option: "${{ github.workspace }}/${{ inputs.psrulePath}}/ps-rule.yaml" # Path to PSRule configuration options file | ||
| source: "${{ inputs.psrulePath}}/.ps-rule/" # Path to folder containing suppression rules to use for analysis. | ||
| summary: false # Disabling as taken care in customized task | ||
|
|
||
| - name: Run PSRule analysis - Security Pillar Only (Azure.Pillar.Security) | ||
| uses: microsoft/[email protected] | ||
| if: ${{ inputs.psruleBaseline == 'Azure.Pillar.Security' }} | ||
| continue-on-error: true | ||
| with: | ||
| modules: "PSRule.Rules.Azure" | ||
| prerelease: true | ||
| baseline: "${{ inputs.psruleBaseline }}" | ||
| inputPath: "${{ inputs.templateFilePath}}" | ||
| outputFormat: Csv | ||
| outputPath: "${{ inputs.templateFilePath}}-PSRule-output.csv" | ||
| option: "${{ github.workspace }}/${{ inputs.psrulePath}}/ps-rule.yaml" # Path to PSRule configuration options file | ||
| source: "${{ inputs.psrulePath}}/.ps-rule/" # Path to folder containing suppression rules to use for analysis. | ||
| summary: false # Disabling as taken care in customized task | ||
|
|
||
| - name: "Parse CSV content" | ||
| if: always() | ||
| uses: azure/powershell@v2 | ||
|
|
||
88 changes: 88 additions & 0 deletions
88
.github/workflows/avm.ptn.data.private-analytical-workspace.yml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,88 @@ | ||
| name: "avm.ptn.data.private-analytical-workspace" | ||
|
|
||
| on: | ||
| workflow_dispatch: | ||
| inputs: | ||
| staticValidation: | ||
| type: boolean | ||
| description: "Execute static validation" | ||
| required: false | ||
| default: true | ||
| deploymentValidation: | ||
| type: boolean | ||
| description: "Execute deployment validation" | ||
| required: false | ||
| default: true | ||
| removeDeployment: | ||
| type: boolean | ||
| description: "Remove deployed module" | ||
| required: false | ||
| default: true | ||
| customLocation: | ||
| type: string | ||
| description: "Default location overwrite (e.g., eastus)" | ||
| required: false | ||
| push: | ||
| branches: | ||
| - main | ||
| paths: | ||
| - ".github/actions/templates/avm-**" | ||
| - ".github/workflows/avm.template.module.yml" | ||
| - ".github/workflows/avm.ptn.data.private-analytical-workspace.yml" | ||
| - "avm/ptn/data/private-analytical-workspace/**" | ||
| - "avm/utilities/pipelines/**" | ||
| - "!avm/utilities/pipelines/platform/**" | ||
| - "!*/**/README.md" | ||
|
|
||
| env: | ||
| modulePath: "avm/ptn/data/private-analytical-workspace" | ||
| workflowPath: ".github/workflows/avm.ptn.data.private-analytical-workspace.yml" | ||
|
|
||
| concurrency: | ||
| group: ${{ github.workflow }} | ||
|
|
||
| jobs: | ||
| ########################### | ||
| # Initialize pipeline # | ||
| ########################### | ||
| job_initialize_pipeline: | ||
| runs-on: ubuntu-latest | ||
| name: "Initialize pipeline" | ||
| steps: | ||
| - name: "Checkout" | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| fetch-depth: 0 | ||
| - name: "Set input parameters to output variables" | ||
| id: get-workflow-param | ||
| uses: ./.github/actions/templates/avm-getWorkflowInput | ||
| with: | ||
| workflowPath: "${{ env.workflowPath}}" | ||
| - name: "Get module test file paths" | ||
| id: get-module-test-file-paths | ||
| uses: ./.github/actions/templates/avm-getModuleTestFiles | ||
| with: | ||
| modulePath: "${{ env.modulePath }}" | ||
| outputs: | ||
| workflowInput: ${{ steps.get-workflow-param.outputs.workflowInput }} | ||
| moduleTestFilePaths: ${{ steps.get-module-test-file-paths.outputs.moduleTestFilePaths }} | ||
| psRuleModuleTestFilePaths: ${{ steps.get-module-test-file-paths.outputs.psRuleModuleTestFilePaths }} | ||
| modulePath: "${{ env.modulePath }}" | ||
|
|
||
| ############################## | ||
| # Call reusable workflow # | ||
| ############################## | ||
| call-workflow-passing-data: | ||
| name: "Run" | ||
| permissions: | ||
| id-token: write # For OIDC | ||
| contents: write # For release tags | ||
| needs: | ||
| - job_initialize_pipeline | ||
| uses: ./.github/workflows/avm.template.module.yml | ||
| with: | ||
| workflowInput: "${{ needs.job_initialize_pipeline.outputs.workflowInput }}" | ||
| moduleTestFilePaths: "${{ needs.job_initialize_pipeline.outputs.moduleTestFilePaths }}" | ||
| psRuleModuleTestFilePaths: "${{ needs.job_initialize_pipeline.outputs.psRuleModuleTestFilePaths }}" | ||
| modulePath: "${{ needs.job_initialize_pipeline.outputs.modulePath}}" | ||
| secrets: inherit |
2 changes: 0 additions & 2 deletions
2
.github/workflows/avm.ptn.deployment-script.import-image-to-acr.yml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,88 @@ | ||
| name: "avm.utl.types.avm-common-types" | ||
|
|
||
| on: | ||
| workflow_dispatch: | ||
| inputs: | ||
| staticValidation: | ||
| type: boolean | ||
| description: "Execute static validation" | ||
| required: false | ||
| default: true | ||
| deploymentValidation: | ||
| type: boolean | ||
| description: "Execute deployment validation" | ||
| required: false | ||
| default: true | ||
| removeDeployment: | ||
| type: boolean | ||
| description: "Remove deployed module" | ||
| required: false | ||
| default: true | ||
| customLocation: | ||
| type: string | ||
| description: "Default location overwrite (e.g., eastus)" | ||
| required: false | ||
| push: | ||
| branches: | ||
| - main | ||
| paths: | ||
| - ".github/actions/templates/avm-**" | ||
| - ".github/workflows/avm.template.module.yml" | ||
| - ".github/workflows/avm.utl.types.avm-common-types.yml" | ||
| - "avm/utl/types/avm-common-types/**" | ||
| - "avm/utilities/pipelines/**" | ||
| - "!avm/utilities/pipelines/platform/**" | ||
| - "!*/**/README.md" | ||
|
|
||
| env: | ||
| modulePath: "avm/utl/types/avm-common-types" | ||
| workflowPath: ".github/workflows/avm.utl.types.avm-common-types.yml" | ||
|
|
||
| concurrency: | ||
| group: ${{ github.workflow }} | ||
|
|
||
| jobs: | ||
| ########################### | ||
| # Initialize pipeline # | ||
| ########################### | ||
| job_initialize_pipeline: | ||
| runs-on: ubuntu-latest | ||
| name: "Initialize pipeline" | ||
| steps: | ||
| - name: "Checkout" | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| fetch-depth: 0 | ||
| - name: "Set input parameters to output variables" | ||
| id: get-workflow-param | ||
| uses: ./.github/actions/templates/avm-getWorkflowInput | ||
| with: | ||
| workflowPath: "${{ env.workflowPath}}" | ||
| - name: "Get module test file paths" | ||
| id: get-module-test-file-paths | ||
| uses: ./.github/actions/templates/avm-getModuleTestFiles | ||
| with: | ||
| modulePath: "${{ env.modulePath }}" | ||
| outputs: | ||
| workflowInput: ${{ steps.get-workflow-param.outputs.workflowInput }} | ||
| moduleTestFilePaths: ${{ steps.get-module-test-file-paths.outputs.moduleTestFilePaths }} | ||
| psRuleModuleTestFilePaths: ${{ steps.get-module-test-file-paths.outputs.psRuleModuleTestFilePaths }} | ||
| modulePath: "${{ env.modulePath }}" | ||
|
|
||
| ############################## | ||
| # Call reusable workflow # | ||
| ############################## | ||
| call-workflow-passing-data: | ||
| name: "Run" | ||
| permissions: | ||
| id-token: write # For OIDC | ||
| contents: write # For release tags | ||
| needs: | ||
| - job_initialize_pipeline | ||
| uses: ./.github/workflows/avm.template.module.yml | ||
| with: | ||
| workflowInput: "${{ needs.job_initialize_pipeline.outputs.workflowInput }}" | ||
| moduleTestFilePaths: "${{ needs.job_initialize_pipeline.outputs.moduleTestFilePaths }}" | ||
| psRuleModuleTestFilePaths: "${{ needs.job_initialize_pipeline.outputs.psRuleModuleTestFilePaths }}" | ||
| modulePath: "${{ needs.job_initialize_pipeline.outputs.modulePath}}" | ||
| secrets: inherit |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -74,7 +74,7 @@ jobs: | |
| } | ||
| - name: Upload artifacts | ||
| uses: actions/[email protected].2 | ||
| uses: actions/[email protected].3 | ||
| with: | ||
| name: publish-module-index-json-artifacts | ||
| path: | | ||
|
|
||
Oops, something went wrong.