Last active
July 29, 2020 12:39
-
-
Save felipecosta09/797d49e0f5515ef87ece85281a93631f to your computer and use it in GitHub Desktop.
Example of How to Scan your Templates using the GitHub Action 🔍
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #--------------------------------------------------------------------- | |
| # GitHub Actions to Scan your Cloud Formation Templates in your CI/CD | |
| # Pipeline | |
| # | |
| # Version Date Info | |
| # 1.0 2020 Initial Version | |
| # | |
| # Made by Felipe Costa and Raphael Bottino | |
| #--------------------------------------------------------------------- | |
| name: Cloud-One-Conformity-Scan-Security | |
| on: | |
| push: | |
| branches: | |
| - master | |
| jobs: | |
| Cloud-One-Conformity-Scan-Security: | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Checkout the code | |
| - uses: actions/checkout@v2 | |
| # Cloud Formation Scan | |
| - name: Cloud One Conformity Pipeline Scanner | |
| uses: raphabot/conformity-template-scanner-pipeline@v1.0.0 | |
| env: | |
| cc_apikey: ${{ secrets.apikey }} | |
| maxExtreme: 0 | |
| maxVeryHigh: 10 | |
| maxHigh: 10 | |
| maxMedium: 10 | |
| maxLow: 10 | |
| cc_region: us-west-2 | |
| templatePath: infrastructure.yaml |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment