-
Notifications
You must be signed in to change notification settings - Fork 1
47 lines (44 loc) · 1.58 KB
/
checkov-scan.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
name: Checkov scan
on:
push:
branches:
# TODO
# - release
# - main
- maks-test-gha
schedule:
# Run every day at 2:00 AM
- cron: '0 2 * * *'
jobs:
checkov-scan-scheduled:
# Will be triggerred if the scheduled event occurs on the develop branch
# TODO
# if: github.event_name == 'schedule' && github.ref == 'refs/heads/develop'
if: github.event_name == 'schedule' && github.ref == 'refs/heads/maks-test-gha'
permissions:
contents: write # for actions/checkout to fetch code
pull-requests: write # for action to create PR
runs-on: ubuntu-latest
timeout-minutes: 2
steps:
# TODO
# - uses: dequelabs/axe-api-team-public/.github/actions/checkov-scans-v1@main
- uses: dequelabs/axe-api-team-public/.github/actions/checkov-scans-v1@maks-test-gha
with:
output-file-path: sca/
checkov-scan-on-push:
# Will be triggerred when there's a push event on the release or main branch
# TODO
# if: github.event_name == 'push' && (github.ref == 'refs/heads/release' || github.ref == 'refs/heads/main')
if: github.event_name == 'push' && github.ref == 'refs/heads/maks-test-gha'
permissions:
contents: write # for actions/checkout to fetch code
pull-requests: write # for action to create PR
runs-on: ubuntu-latest
timeout-minutes: 2
steps:
# TODO
# - uses: dequelabs/axe-api-team-public/.github/actions/checkov-scans-v1@main
- uses: dequelabs/axe-api-team-public/.github/actions/checkov-scans-v1@maks-test-gha
with:
output-file-path: sca/