File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1- name : " GitHub App Authentication"
2- description : " Authenticate as a GitHub App and configure git user settings"
1+ name : ' GitHub App Authentication'
2+ description : ' Authenticate as a GitHub App and configure git user settings'
33
44branding :
5- icon : " lock"
6- color : " blue"
5+ icon : ' lock'
6+ color : ' blue'
77
88inputs :
99 app-id :
10- description : " GitHub App ID"
10+ description : ' GitHub App ID'
1111 required : true
1212
1313 private-key :
14- description : " GitHub App private key"
14+ description : ' GitHub App private key'
1515 required : true
1616
1717 owner :
18- description : " Repository owner (defaults to current repository owner)"
18+ description : ' Repository owner (defaults to current repository owner)'
1919 required : false
2020 default : ${{ github.repository_owner }}
2121
2222outputs :
2323 token :
24- description : " GitHub App token"
24+ description : ' GitHub App token'
2525 value : ${{ steps.app-token.outputs.token }}
2626
2727 app-slug :
28- description : " GitHub App slug name"
28+ description : ' GitHub App slug name'
2929 value : ${{ steps.app-token.outputs.app-slug }}
3030
3131 user-id :
32- description : " GitHub App bot user ID"
32+ description : ' GitHub App bot user ID'
3333 value : ${{ steps.get-user-id.outputs.user-id }}
3434
3535 user-name :
36- description : " GitHub App bot user name (app slug with [bot] suffix)"
36+ description : ' GitHub App bot user name (app slug with [bot] suffix)'
3737 value : ${{ steps.get-user-id.outputs.user-name }}
3838
3939runs :
40- using : " composite"
40+ using : ' composite'
4141 steps :
4242 - name : Generate GitHub App token
4343 id : app-token
Original file line number Diff line number Diff line change 1- name : " Lint with Checkov"
2- description : " Run checkov IaC security scanner"
1+ name : ' Lint with Checkov'
2+ description : ' Run checkov IaC security scanner'
33
44runs :
5- using : " composite"
5+ using : ' composite'
66 steps :
77 - name : Run checkov
88 shell : bash
Original file line number Diff line number Diff line change 1- name : " Lint with Gitleaks"
2- description : " Check for secrets in git history using gitleaks"
1+ name : ' Lint with Gitleaks'
2+ description : ' Check for secrets in git history using gitleaks'
33
44runs :
5- using : " composite"
5+ using : ' composite'
66 steps :
77 - name : Run gitleaks
88 shell : bash
Original file line number Diff line number Diff line change 1- name : " Lint with Grype"
2- description : " Run grype vulnerability scanner"
1+ name : ' Lint with Grype'
2+ description : ' Run grype vulnerability scanner'
33
44runs :
5- using : " composite"
5+ using : ' composite'
66 steps :
77 - name : Run grype
88 shell : bash
Original file line number Diff line number Diff line change 1- name : " Lint with KICS"
2- description : " Run KICS IaC security scanner"
1+ name : ' Lint with KICS'
2+ description : ' Run KICS IaC security scanner'
33
44runs :
5- using : " composite"
5+ using : ' composite'
66 steps :
77 - name : Run KICS scan
88 shell : bash
Original file line number Diff line number Diff line change 1- name : " Lint with Secretlint"
2- description : " Check for secrets using secretlint"
1+ name : ' Lint with Secretlint'
2+ description : ' Check for secrets using secretlint'
33
44runs :
5- using : " composite"
5+ using : ' composite'
66 steps :
77 - name : Run secretlint
88 shell : bash
Original file line number Diff line number Diff line change 1- name : " Lint with Syft"
2- description : " Generate SBOM using syft"
1+ name : ' Lint with Syft'
2+ description : ' Generate SBOM using syft'
33
44runs :
5- using : " composite"
5+ using : ' composite'
66 steps :
77 - name : Run syft
88 shell : bash
Original file line number Diff line number Diff line change 1- name : " Lint with Trivy"
2- description : " Run trivy vulnerability scanner and generate SBOM"
1+ name : ' Lint with Trivy'
2+ description : ' Run trivy vulnerability scanner and generate SBOM'
33
44runs :
5- using : " composite"
5+ using : ' composite'
66 steps :
77 - name : Run trivy filesystem scan
88 shell : bash
Original file line number Diff line number Diff line change 1- name : " Lint with TruffleHog"
2- description : " Check for secrets using trufflehog"
1+ name : ' Lint with TruffleHog'
2+ description : ' Check for secrets using trufflehog'
33
44runs :
5- using : " composite"
5+ using : ' composite'
66 steps :
77 - name : Run trufflehog
88 shell : bash
Original file line number Diff line number Diff line change 9595 - name : Install mise and tools
9696 uses : jdx/mise-action@v2
9797 with :
98- install_args : " grype trivy syft gitleaks trufflehog checkov aqua:secretlint/secretlint"
98+ install_args : ' grype trivy syft gitleaks trufflehog checkov aqua:secretlint/secretlint'
9999
100100 - name : Run all security linters in parallel
101101 uses : qoomon/actions--parallel-steps@v1
You can’t perform that action at this time.
0 commit comments