diff --git a/.github/workflows/blank.yml b/.github/workflows/blank.yml index 1ef4e67..ba5fa66 100644 --- a/.github/workflows/blank.yml +++ b/.github/workflows/blank.yml @@ -1,26 +1,22 @@ -version: 0.2 -env: - variables: - BC_SOURCE: "codebuild" - PRISMA_API_URL: "https://api3.prismacloud.io" - parameter-store: - BC_API_KEY: "bc-api-key" -phases: - install: - runtime-versions: - python: 3.7 - commands: - - pip3 install checkov - - echo Installing codebuild-extras... - - curl -fsSL https://raw.githubusercontent.com/bridgecrewio/aws-codebuild-extras/master/install >> extras.sh - - . ./extras.sh +--- +name: Checkov +on: + push: + branches: + - master +jobs: build: - commands: - - pip3 uninstall -y aws-sam-cli - - checkov -d . --use-enforcement-rules --bc-api-key $BC_API_KEY --repo-id $CODEBUILD_ACCOUNT_ID/$CODEBUILD_PROJECT --branch $CODEBUILD_GIT_BRANCH -o cli -o junitxml --output-file-path console,test_results.xml -reports: - prisma-cloud-infrastructure-security: - files: - - test_results.xml - discard-paths: yes - file-format: JunitXml + + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - name: Set up Python 3.8 + uses: actions/setup-python@v4 + with: + python-version: 3.8 + - name: Test with Checkov + id: checkov + uses: bridgecrewio/checkov-action@master + with: + directory: example/examplea + framework: terraform