From 9eaafe6eaef7c4bb66a82cc47ad13f5a9cc93e0a Mon Sep 17 00:00:00 2001 From: InternalBenchmarkDebricked <101089214+InternalBenchmarkDebricked@users.noreply.github.com> Date: Thu, 18 Apr 2024 11:48:21 +0200 Subject: [PATCH] Create debricked.yml --- .github/workflows/debricked.yml | 54 +++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 .github/workflows/debricked.yml diff --git a/.github/workflows/debricked.yml b/.github/workflows/debricked.yml new file mode 100644 index 0000000..060c3f2 --- /dev/null +++ b/.github/workflows/debricked.yml @@ -0,0 +1,54 @@ +name: Debricked scan + +on: [push] + +jobs: + vulnerabilities-scan-production: + runs-on: ubuntu-latest + + container: + image: debricked/cli:latest-resolution-debian + + steps: + - name: Checkout repository + uses: actions/checkout@v3 + + - name: Fingerprint files + run: | + cd npm + npm install + rm package.json + rm package-lock.json + cd .. + cd yarn + rm package.json + rm yarn.lock + cd .. + debricked fingerprint --fingerprint-compressed-content + + - name: Run Scan + run: | + debricked scan + env: + DEBRICKED_TOKEN: ${{ secrets.DEBRICKED_TOKEN }} + + vulnerabilities-scan-staging: + runs-on: ubuntu-latest + + container: + image: debricked/cli:latest-resolution-debian + + steps: + - name: Checkout repository + uses: actions/checkout@v3 + + - name: Fingerprint files + run: | + debricked fingerprint --fingerprint-compressed-content + + - name: Run Scan + run: | + debricked scan + env: + DEBRICKED_TOKEN: ${{ secrets.DEBRICKED_TOKEN_STAGING }} + DEBRICKED_URI: 'https://staging.debricked.com'