Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Iac scan tool download and integration in the action #44

Open
ricardojdsilva87 opened this issue Dec 22, 2022 · 0 comments
Open

Comments

@ricardojdsilva87
Copy link

Hello everyone,

Is it possible somehow to support the integration of the download of the available iac tool from synopsys in the action?

Currently we are doing the following step before running the detect-action:

      - name: Download Iac tool
        shell: bash
        run: |
          wget https://sig-repo.synopsys.com/artifactory/sigma-release-trial/2022.6.0/sigma-linux_x86_64 -O /home/runner/sigma-linux_x86_64
          chmod +x /home/runner/sigma-linux_x86_64

Also need to specify the following in the application.yml:

  tools: DETECTOR,IAC_SCAN
  iac.scanner.local.path: /home/runner/sigma-linux_x86_64
  iac.scan.paths: dockerimage/,helm-chart/templates/

It would be nice to have somehow the download being made automatically if the IAC_SCAN option is specified in the tools.

Also since blackduck needs Java 11 to run, why not integrate also the step to download Java 11 into the action?

Thanks for your work!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant