✨ Actions Runner for CaDeT DPR

[jacobwoffenden]

This pull request:

• Resolves ✨ Digital Prisons Reporting create-a-derived-table github action integration analytical-platform#3544
• Adds a new runner for CaDeT to access DPR

Signed-off-by: Jacob Woffenden [email protected]

[github-actions]

Trivy Scan Success

Show Output

```hcl

---

Trivy will check the following folders:
terraform/environments/analytical-platform-compute

---

Running Trivy in terraform/environments/analytical-platform-compute
2024-06-17T08:29:11Z INFO Need to update DB
2024-06-17T08:29:11Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-06-17T08:29:13Z INFO Vulnerability scanning is enabled
2024-06-17T08:29:13Z INFO Misconfiguration scanning is enabled
2024-06-17T08:29:13Z INFO Need to update the built-in policies
2024-06-17T08:29:13Z INFO Downloading the built-in policies...
53.79 KiB / 53.79 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-06-17T08:29:13Z INFO Secret scanning is enabled
2024-06-17T08:29:13Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-06-17T08:29:13Z INFO Please see also https://aquasecurity.github.io/trivy/v0.52/docs/scanner/secret/#recommendation for faster secret detection
2024-06-17T08:29:36Z INFO Number of language-specific files num=0
2024-06-17T08:29:36Z INFO Detected config files num=13

git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=098c6a86ca716dae74bd98974accc29f66178c43/main.tf (terraform)

Tests: 5 (SUCCESSES: 1, FAILURES: 0, EXCEPTIONS: 4)
Failures: 0 (HIGH: 0, CRITICAL: 0)

git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=de95e21a3bc51cd3a44b3b95a4c2f61000649ebb/modules/iam-role-for-service-accounts-eks/policies.tf (terraform)

Tests: 22 (SUCCESSES: 0, FAILURES: 0, EXCEPTIONS: 22)
Failures: 0 (HIGH: 0, CRITICAL: 0)

iam-policies.tf (terraform)

Tests: 6 (SUCCESSES: 0, FAILURES: 0, EXCEPTIONS: 6)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/analytical-platform-compute

*****************************

Running Checkov in terraform/environments/analytical-platform-compute
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-06-17 08:29:39,442 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks:5.39.1 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,443 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-github-oidc-role:5.39.1 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,443 [MainThread  ] [WARNI]  Failed to download module ministryofjustice/observability-platform-tenant/aws:1.2.0 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,443 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/secrets-manager/aws:1.1.2 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,443 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/s3-bucket/aws:4.1.2 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,443 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/vpc/aws//modules/vpc-endpoints:5.8.1 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,443 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/iam/aws//modules/iam-policy:5.39.1 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,444 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/vpc/aws:5.8.1 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,444 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/security-group/aws:5.1.2 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,444 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/rds/aws:6.6.0 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,444 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/eks/aws:20.13.1 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,444 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/kms/aws:3.0.0 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,444 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/route53/aws//modules/zones:3.1.0 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,445 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/cloudwatch/aws//modules/log-group:5.3.1 (for external modules, the --download-external-modules flag is required)
2024-06-17 08:29:39,445 [MainThread  ] [WARNI]  Failed to download module terraform-aws-modules/eks-pod-identity/aws:1.2.1 (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 72, Failed checks: 0, Skipped checks: 74


checkov_exitcode=0

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.5.0)
tflint will check the following folders:
terraform/environments/analytical-platform-compute

*****************************

Running tflint in terraform/environments/analytical-platform-compute
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

Trivy Scan Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/analytical-platform-compute

*****************************

Running Trivy in terraform/environments/analytical-platform-compute
2024-06-17T08:29:11Z	INFO	Need to update DB
2024-06-17T08:29:11Z	INFO	Downloading DB...	repository="ghcr.io/aquasecurity/trivy-db:2"
2024-06-17T08:29:13Z	INFO	Vulnerability scanning is enabled
2024-06-17T08:29:13Z	INFO	Misconfiguration scanning is enabled
2024-06-17T08:29:13Z	INFO	Need to update the built-in policies
2024-06-17T08:29:13Z	INFO	Downloading the built-in policies...
53.79 KiB / 53.79 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-06-17T08:29:13Z	INFO	Secret scanning is enabled
2024-06-17T08:29:13Z	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-06-17T08:29:13Z	INFO	Please see also https://aquasecurity.github.io/trivy/v0.52/docs/scanner/secret/#recommendation for faster secret detection
2024-06-17T08:29:36Z	INFO	Number of language-specific files	num=0
2024-06-17T08:29:36Z	INFO	Detected config files	num=13

git::https:/github.com/terraform-aws-modules/terraform-aws-eks?ref=098c6a86ca716dae74bd98974accc29f66178c43/main.tf (terraform)
===============================================================================================================================
Tests: 5 (SUCCESSES: 1, FAILURES: 0, EXCEPTIONS: 4)
Failures: 0 (HIGH: 0, CRITICAL: 0)


git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=de95e21a3bc51cd3a44b3b95a4c2f61000649ebb/modules/iam-role-for-service-accounts-eks/policies.tf (terraform)
=============================================================================================================================================================================
Tests: 22 (SUCCESSES: 0, FAILURES: 0, EXCEPTIONS: 22)
Failures: 0 (HIGH: 0, CRITICAL: 0)


iam-policies.tf (terraform)
===========================
Tests: 6 (SUCCESSES: 0, FAILURES: 0, EXCEPTIONS: 6)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

[julialawrence]

ChooChoo