Skip to content
This repository was archived by the owner on Dec 6, 2024. It is now read-only.

Commit d174b6a

Browse files
Pipelines integration (#900)
* Create pipeline-workflow.yml * Create pull-request-workflow.yml
1 parent 824ca2d commit d174b6a

File tree

2 files changed

+46
-0
lines changed

2 files changed

+46
-0
lines changed
Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
name: Pipeline Workflow
2+
3+
env:
4+
REGION: us-east-1
5+
6+
on: push
7+
8+
jobs:
9+
pipeline-job:
10+
name: Pipeline Job
11+
runs-on: ubuntu-latest
12+
permissions:
13+
id-token: write
14+
steps:
15+
- name: Configure AWS credentials
16+
uses: aws-actions/configure-aws-credentials@v1
17+
with:
18+
role-to-assume: ${{ secrets.DISPATCHER_ROLE_ARN }}
19+
aws-region: ${{ env.REGION }}
20+
role-duration-seconds: 900
21+
role-session-name: OIDCSession
22+
- name: Run CodeBuild
23+
uses: aws-actions/aws-codebuild-run-build@v1
24+
with:
25+
project-name: ${{ secrets.DISPATCHER_CODEBUILD_PROJECT_NAME }}
Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: Pull Request Workflow
2+
3+
on:
4+
pull_request:
5+
types: [opened, edited, reopened, synchronize]
6+
7+
jobs:
8+
pull-request-job:
9+
name: Status Checks
10+
runs-on: ubuntu-latest
11+
steps:
12+
- name: Viperlight
13+
run: |
14+
wget -q https://viperlight-scanner.s3.amazonaws.com/latest/.viperlightrc
15+
wget -q https://viperlight-scanner.s3.amazonaws.com/latest/viperlight.zip
16+
unzip -q viperlight.zip -d ../viperlight
17+
rm -r ./viperlight.zip
18+
echo "Content scanning utility installation complete `date`"
19+
echo "Starting content scanning `date` in `pwd`"
20+
../viperlight/bin/viperlight scan -m files-contents -m files-aws -m files-binary -m files-entropy -m files-secrets
21+
echo "Completed content scanning `date`"

0 commit comments

Comments
 (0)