-
Notifications
You must be signed in to change notification settings - Fork 183
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
github action for kubeaudit to generate sarif results #462
Comments
thepwagner
changed the title
github action for kubeaudit to upload sarif results
github action for kubeaudit to generate sarif results
Jul 27, 2022
This could also just be documentation: we can write a sample workflow that fetches kubeaudit via Wrapping the functionality as an Action(TM) is just an added convenience. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
ISSUE TYPE
SUMMARY
the idea here is to offer open source users the convenience of uploading a sarif result as a step in their github action
Some ideas for this suggested by @thepwagner:
Make
Shopify/kubeaudit
an actionWe add a
action.yml
file to theShopify/kubeaudit
, turning it into either a Docker container action or composite action.This would mean users enable it like:
Depending on the implementation, it can result in compiling the kubeaudit binary each run (and be slow).
Make a
Shopify/kubeaudit-action
actionThis is a common pattern when an action is wrapping a tool with its own release process, that doesn't want to pollute the original tool by Actions-izing it. https://github.com/golangci/golangci-lint-action is a good example.
TypeScript is pretty dope for building actions that do this:
oncall-action
)This would mean users enable like:
Since TypeScript runs without container overhead, and this pattern downloads pre-compiled binaries I think this would have the fastest runtimes.
FEATURE IDEA
Proposal:
1 This is the quickest way to get a new feature! We reserve the right to close feature requests, even ones we like, if the proposer does not intend to contribute to the feature and it doesn't fit in our current roadmap.
The text was updated successfully, but these errors were encountered: