Adding Github Action with Kubescape scan

Signed-off-by: David Alima <davida@armosec.io>
armosec · Jan 22, 2025 · a2bae8b · a2bae8b
1 parent f789057
commit a2bae8b
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/.github/workflows/hello-world.yml b/.github/workflows/hello-world.yml
@@ -0,0 +1,17 @@
+name: Kubescape scanning for misconfigurations
+on: [push, pull_request]
+jobs:
+    kubescape:
+        runs-on: ubuntu-latest
+        steps:
+        - uses: actions/checkout@v3
+        - uses: kubescape/github-action@main
+            continue-on-error: false
+            with:
+            format: sarif
+            outputFile: results.sarif
+            failedThreshold: 80
+        - name: Upload Kubescape scan results to Github Code Scanning
+            uses: github/codeql-action/upload-sarif@v2
+            with:
+            sarif_file: results.sarif