ci:add kube-linter

KubeLinter is a SAST tool to scan Kubernetes YAML and Helm Charts
sse-secure-systems · Aug 13, 2021 · fa1d72b · fa1d72b
1 parent 587d5a3
commit fa1d72b
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/.github/workflows/cicd.yaml b/.github/workflows/cicd.yaml
@@ -41,6 +41,17 @@ jobs:
         run: |
           python3 -m black . 2>&1 | grep -q "reformatted" && { echo 'Not properly formatted.'; exit 1; } || true
 
+  kube-linter:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Scan repo
+        id: kube-lint-repo
+        uses: stackrox/kube-linter-action@v1.0.0
+        with:
+          directory: helm
+          config: .kube-linter/config.yaml
+
   hadolint:
     runs-on: ubuntu-latest
     container:

diff --git a/.kube-linter/config.yaml b/.kube-linter/config.yaml
@@ -0,0 +1,2 @@
+checks:
+  doNotAutoAddDefaults: false