-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
e32647c
commit c8502a2
Showing
2 changed files
with
43 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,42 @@ | ||
name: Check Kubernetes YAMLs with kube-linter | ||
|
||
on: | ||
pull_request: | ||
|
||
jobs: | ||
scan: | ||
runs-on: ubuntu-latest | ||
steps: | ||
- uses: actions/checkout@v2 | ||
|
||
# This prepares directory where github/codeql-action/upload-sarif@v1 looks up report files by default. | ||
- name: Create ../results directory for SARIF report files | ||
shell: bash | ||
run: mkdir -p ../results | ||
|
||
- name: Scan yaml files with kube-linter | ||
uses: stackrox/[email protected] | ||
id: kube-linter-action-scan | ||
with: | ||
# Adjust this directory to the location where your kubernetes resources and helm charts are located. | ||
directory: "**" | ||
# Adjust this to the location of kube-linter config you're using, or remove the setting if you'd like to use | ||
# the default config. | ||
config: .kube-linter.yaml | ||
# The following two settings make kube-linter produce scan analysis in SARIF format which would then be | ||
# made available in GitHub UI via upload-sarif action below. | ||
format: sarif | ||
output-file: ../results/kube-linter.sarif | ||
# The following line prevents aborting the workflow immediately in case your files fail kube-linter checks. | ||
# This allows the following upload-sarif action to still upload the results to your GitHub repo. | ||
continue-on-error: true | ||
|
||
- name: Upload SARIF report files to GitHub | ||
uses: github/codeql-action/upload-sarif@v1 | ||
|
||
# Ensure the workflow eventually fails if files did not pass kube-linter checks. | ||
- name: Verify kube-linter-action succeeded | ||
shell: bash | ||
run: | | ||
echo "If this step fails, kube-linter found issues. Check the output of the scan step above." | ||
[[ "${{ steps.kube-linter-action-scan.outcome }}" == "success" ]] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
#for future configuration of kube linter |