Skip to content

Commit 2aaedbf

Browse files
bug: update dependabot.yml (#24)
* bug: update dependabot.yml * bug: update changelog.yml file and use shared-workflows * bug: update tfsec.yml file workflow with shared-workflows
1 parent 9c9112f commit 2aaedbf

File tree

3 files changed

+17
-40
lines changed

3 files changed

+17
-40
lines changed

.github/dependabot.yml

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,14 @@ updates:
1010
schedule:
1111
interval: "weekly"
1212
- package-ecosystem: "terraform" # See documentation for possible values
13-
directory: "_example/" # Location of package manifests
13+
directory: "_example/generate-certificate-dns" # Location of package manifests
14+
schedule:
15+
interval: "weekly"
16+
- package-ecosystem: "terraform" # See documentation for possible values
17+
directory: "_example/generate-certificate-email" # Location of package manifests
18+
schedule:
19+
interval: "weekly"
20+
- package-ecosystem: "terraform" # See documentation for possible values
21+
directory: "_example/import-certificate" # Location of package manifests
1422
schedule:
1523
interval: "weekly"
Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,13 @@
11
name: changelog
22
permissions: write-all
3-
43
on:
54
push:
65
tags:
76
- "*"
8-
# Allows you to run this workflow manually from the Actions tab
97
workflow_dispatch:
108
jobs:
11-
call-workflow-changelog:
9+
changelog:
1210
uses: clouddrove/github-shared-workflows/.github/workflows/changelog.yml@master
11+
secrets: inherit
1312
with:
1413
branch: 'master'

.github/workflows/tfsec.yml

Lines changed: 6 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -1,41 +1,11 @@
11
name: tfsec
2+
permissions: write-all
23
on:
34
pull_request:
4-
5+
workflow_dispatch:
56
jobs:
67
tfsec:
7-
name: Terraform Security Scan
8-
runs-on: ubuntu-latest
9-
10-
steps:
11-
- name: Clone repo
12-
uses: actions/checkout@master
13-
14-
- name: tfsec Basic
15-
uses: aquasecurity/[email protected]
16-
with:
17-
sarif_file: tfsec.sarif
18-
working_directory: ./_example/
19-
full_repo_scan: true
20-
21-
- name: Upload SARIF file
22-
uses: github/codeql-action/upload-sarif@v1
23-
with:
24-
# Path to SARIF file relative to the root of the repository
25-
sarif_file: tfsec.sarif
26-
27-
- name: tfsec commenter for PR
28-
uses: tfsec/tfsec-pr-commenter-action@main
29-
with:
30-
GITHUB_TOKEN: ${{ secrets.GITHUB}}
31-
working_directory: ./_example/
32-
33-
- name: 'Terraform security scan Advanced'
34-
uses: triat/[email protected]
35-
if: github.event_name == 'pull_request'
36-
env:
37-
GITHUB_TOKEN: ${{ secrets.GITHUB}}
38-
tfsec_actions_working_dir: ./_example/
39-
tfsec_actions_comment: true
40-
tfsec_output_format: sarif
41-
continue-on-error: true
8+
uses: clouddrove/github-shared-workflows/.github/workflows/tfsec.yml@master
9+
secrets: inherit
10+
with:
11+
working_directory: '.'

0 commit comments

Comments
 (0)