Skip to content

Test Container Use Case #1177

Test Container Use Case

Test Container Use Case #1177

name: Test Container Use Case
# This workflow tests that the action can successfully
# scan a GitHub repository. This workflow runs automatically
# every 6 hours, and on pushes.
on:
schedule:
- cron: '0 */6 * * *' # runs every 6 hours
push:
branches: #
- '*'
jobs:
daily_job:
runs-on: ubuntu-latest
environment:
name: plugin-development
steps:
- name: Checkout this repository
uses: actions/checkout@v4
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
with:
aws-region: ${{ secrets.AWS_REGION }}
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
- name: Test container scan
id: inspector
uses: aws-actions/vulnerability-scan-github-action-for-amazon-inspector@v1
with:
artifact_type: 'container'
artifact_path: 'ubuntu:14.04'
platform: "linux/arm64"
display_vulnerability_findings: "enabled"
sbomgen_version: "latest"
- name: Display scan results
run: cat ${{ steps.inspector.outputs.inspector_scan_results }}
- name: Validate scan content
run: python3 validator/validate_inspector_scan.py --file ${{ steps.inspector.outputs.inspector_scan_results }}
# only run if the previous step failed
- name: Notify maintainers of validation failure
if: ${{ failure() }}
run: echo "this feature is not implemented"
# TODO: add steps to send notification to a Lambda to cut a ticket on job failure