From a2bae8bcca2613aaa6d9c5c76d82f404e3ffa5cd Mon Sep 17 00:00:00 2001 From: David Alima Date: Wed, 22 Jan 2025 20:14:12 +0200 Subject: [PATCH] Adding Github Action with Kubescape scan Signed-off-by: David Alima --- .github/workflows/hello-world.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/workflows/hello-world.yml diff --git a/.github/workflows/hello-world.yml b/.github/workflows/hello-world.yml new file mode 100644 index 0000000..8b4d820 --- /dev/null +++ b/.github/workflows/hello-world.yml @@ -0,0 +1,17 @@ +name: Kubescape scanning for misconfigurations +on: [push, pull_request] +jobs: + kubescape: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + - uses: kubescape/github-action@main + continue-on-error: false + with: + format: sarif + outputFile: results.sarif + failedThreshold: 80 + - name: Upload Kubescape scan results to Github Code Scanning + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: results.sarif \ No newline at end of file