-
Notifications
You must be signed in to change notification settings - Fork 94
40 lines (37 loc) · 1.04 KB
/
terrascan.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
name: Terrascan
on:
push:
paths:
- 'chart/k8gb/**'
pull_request:
branches:
- master
paths:
- 'chart/k8gb/**'
permissions:
contents: read
security-events: write # To upload sarif file
jobs:
terrascan:
runs-on: ubuntu-24.04
steps:
- name: Harden Runner
uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
with:
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Run Terrascan
id: terrascan
uses: accurics/terrascan-action@a4b0f7ec5fb3c4c66b8e76d824d958002f6ce12c
with:
iac_type: helm
iac_version: v3
only_warn: false
verbose: true
sarif_upload: true
iac_dir: chart/k8gb
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
with:
sarif_file: terrascan.sarif