|
1 | | -name: Test Devolv Action |
| 1 | +name: Devolv Action Test |
2 | 2 |
|
3 | 3 | on: |
4 | | - push: |
5 | | - branches: [ main ] |
6 | | - pull_request: |
7 | | - branches: [ main ] |
| 4 | + workflow_dispatch: {} |
8 | 5 |
|
9 | 6 | jobs: |
10 | | - validate-devolv: |
11 | | - name: Devolv - Validate IAM Policies |
| 7 | + test-devolv: |
12 | 8 | runs-on: ubuntu-latest |
13 | 9 |
|
14 | 10 | steps: |
15 | | - - name: Checkout test repo |
| 11 | + - name: Checkout code |
16 | 12 | uses: actions/checkout@v3 |
17 | 13 |
|
18 | | - - name: Run Devolv Validate |
19 | | - uses: devolvdev/devolv-actions@v1 |
| 14 | + - name: Run Devolv Drift |
| 15 | + uses: your-org/devolv-action@v2 |
20 | 16 | with: |
21 | | - tool: validate |
22 | | - path: ./sample_policies |
23 | | - continue-on-error: true |
24 | | - |
25 | | - drift-devolv: |
26 | | - name: Devolv - Detect IAM Policy Drift |
27 | | - runs-on: ubuntu-latest |
28 | | - needs: validate-devolv |
| 17 | + tool: drift |
| 18 | + policy-name: DevolvTestPolicy |
| 19 | + path: ./test-devolv-policy.json |
| 20 | + github-token: ${{ secrets.GITHUB_TOKEN }} |
29 | 21 |
|
30 | | - steps: |
31 | | - - name: Checkout test repo |
32 | | - uses: actions/checkout@v3 |
33 | | - |
34 | | - - name: Configure AWS credentials |
35 | | - uses: aws-actions/configure-aws-credentials@v4 |
36 | | - with: |
37 | | - aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} |
38 | | - aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
39 | | - aws-region: ******* |
40 | | - role-to-assume: arn:aws:iam::*******:role/DevolvCIRole |
41 | | - role-skip-session-tagging: true |
42 | | - |
43 | | - - name: Run Devolv Drift Detection |
44 | | - uses: devolvdev/devolv-actions@v1 |
| 22 | + - name: Run Devolv Validate |
| 23 | + uses: your-org/devolv-action@v2 |
45 | 24 | with: |
46 | | - tool: drift # drift = detect IAM drift (validator also available) |
47 | | - policy-name: DevolvTestPolicyHuge # Name of the IAM policy in AWS |
48 | | - path: ./test-devolv-policy.json # Path to your local IaC policy file |
| 25 | + tool: validate |
| 26 | + path: ./test-devolv-policy.json |
| 27 | + github-token: ${{ secrets.GITHUB_TOKEN }} |
0 commit comments