Skip to content

Instantly share code, notes, and snippets.

@felipecosta09
Last active July 29, 2020 12:39
Show Gist options
  • Select an option

  • Save felipecosta09/797d49e0f5515ef87ece85281a93631f to your computer and use it in GitHub Desktop.

Select an option

Save felipecosta09/797d49e0f5515ef87ece85281a93631f to your computer and use it in GitHub Desktop.
Example of How to Scan your Templates using the GitHub Action 🔍
#---------------------------------------------------------------------
# GitHub Actions to Scan your Cloud Formation Templates in your CI/CD
# Pipeline
#
# Version Date Info
# 1.0 2020 Initial Version
#
# Made by Felipe Costa and Raphael Bottino
#---------------------------------------------------------------------
name: Cloud-One-Conformity-Scan-Security
on:
push:
branches:
- master
jobs:
Cloud-One-Conformity-Scan-Security:
runs-on: ubuntu-latest
steps:
# Checkout the code
- uses: actions/checkout@v2
# Cloud Formation Scan
- name: Cloud One Conformity Pipeline Scanner
uses: raphabot/conformity-template-scanner-pipeline@v1.0.0
env:
cc_apikey: ${{ secrets.apikey }}
maxExtreme: 0
maxVeryHigh: 10
maxHigh: 10
maxMedium: 10
maxLow: 10
cc_region: us-west-2
templatePath: infrastructure.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment