jit-security.yml

name: Workflows generated by the MVS plan
run-name: ${{fromJSON(github.event.inputs.client_payload).payload.job_title}}
on:
  workflow_dispatch:
    inputs:
       client_payload:
          description: The Client payload
          required: true

permissions:
  contents: read
  id-token: write

jobs:
  enrich:
    if: fromJSON(github.event.inputs.client_payload).payload.workflow_job_name == 'enrich' && fromJSON(github.event.inputs.client_payload).payload.workflow_slug == 'workflow-enrichment-code'
    runs-on: ubuntu-20.04
    timeout-minutes: 20
    steps:
    - name: enrichment
      uses: jitsecurity-controls/jit-github-action@v4.0.1
      with:
        security_control: registry.jit.io/control-enrichment-slim:main
        
  iac-misconfig-detection-cloudformation:
    if: fromJSON(github.event.inputs.client_payload).payload.workflow_job_name == 'iac-misconfig-detection-cloudformation' && fromJSON(github.event.inputs.client_payload).payload.workflow_slug == 'workflow-iac-misconfiguration-detection'
    runs-on: ubuntu-20.04
    timeout-minutes: 20
    steps:
    - name: kics
      uses: jitsecurity-controls/jit-github-action@v4.0.1
      with:
        security_control: registry.jit.io/control-kics-alpine:main
        security_control_output_file: /code/jit-report/results.json
        
  iac-misconfig-detection-pulumi:
    if: fromJSON(github.event.inputs.client_payload).payload.workflow_job_name == 'iac-misconfig-detection-pulumi' && fromJSON(github.event.inputs.client_payload).payload.workflow_slug == 'workflow-iac-misconfiguration-detection'
    runs-on: ubuntu-20.04
    timeout-minutes: 20
    steps:
    - name: kics
      uses: jitsecurity-controls/jit-github-action@v4.0.1
      with:
        security_control: registry.jit.io/control-kics-alpine:main
        security_control_output_file: /code/jit-report/results.json
        
  iac-misconfig-detection-terraform:
    if: fromJSON(github.event.inputs.client_payload).payload.workflow_job_name == 'iac-misconfig-detection-terraform' && fromJSON(github.event.inputs.client_payload).payload.workflow_slug == 'workflow-iac-misconfiguration-detection'
    runs-on: ubuntu-20.04
    timeout-minutes: 20
    steps:
    - name: kics
      uses: jitsecurity-controls/jit-github-action@v4.0.1
      with:
        security_control: registry.jit.io/control-kics-alpine:main
        security_control_output_file: /code/jit-report/results.json
        
  remediation-pr:
    if: fromJSON(github.event.inputs.client_payload).payload.workflow_job_name == 'remediation-pr' && fromJSON(github.event.inputs.client_payload).payload.workflow_slug == 'workflow-remediation-pr'
    runs-on: ubuntu-20.04
    timeout-minutes: 20
    steps:
    - name: remediation-pr
      uses: jitsecurity-controls/jit-github-action@v4.0.1
      with:
        security_control: registry.jit.io/open-remediation-pr-alpine:main
        security_control_output_file: /opt/code/jit-report/results.json