Skip to content

Bump bridgecrewio/checkov-action from 12.2602.0 to 12.2614.0 #156

Bump bridgecrewio/checkov-action from 12.2602.0 to 12.2614.0

Bump bridgecrewio/checkov-action from 12.2602.0 to 12.2614.0 #156

name: Receive pull request
on:
pull_request:
jobs:
compliance-scan:
runs-on: ubuntu-20.04
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Run Checkov action
id: checkov
uses: bridgecrewio/[email protected]
with:
framework: terraform
# we are fine with Google's Keys
skip_check: CKV_GCP_84,CKV_GIT_4
output_format: cli
download_external_modules: true
security-scan:
runs-on: ubuntu-20.04
steps:
- uses: actions/checkout@v4
- run: docker run -v ${PWD}:/src aquasec/tfsec:v1.8 /src
lint:
runs-on: ubuntu-20.04
steps:
- uses: actions/checkout@v4
- uses: terraform-linters/setup-tflint@v4
name: Setting up TFLint
with:
tflint_version: v0.29.0
- name: Initializing TFLint
run: tflint --init
- name: Linting
run: tflint -f compact --disable-rule=terraform_module_pinned_source
qa:
runs-on: ubuntu-20.04
steps:
- uses: actions/checkout@v4
- name: Setup Terraform
uses: hashicorp/setup-terraform@v3
- name: Terraform Format
run: terraform fmt -check -recursive
mark-pr:
needs:
- lint
- qa
- compliance-scan
- security-scan
runs-on: ubuntu-20.04
permissions:
pull-requests: write
steps:
- uses: actions/checkout@v4
# - uses: actions-ecosystem/[email protected]
# with:
# labels: |
# linted
# qaed
# ready-for-review
# github_token: ${{ secrets.GH_TOKEN_FOR_LABELING }}
# number: ${{ github.event.number }}