File tree Expand file tree Collapse file tree 2 files changed +8
-1
lines changed
actions/lambda_artifacts_build Expand file tree Collapse file tree 2 files changed +8
-1
lines changed Original file line number Diff line number Diff line change @@ -27,6 +27,7 @@ inputs:
2727runs :
2828 using : " composite"
2929 steps :
30+ - uses : actions/checkout@v4
3031 - name : Build sample lambda function
3132 shell : bash
3233 working-directory : ${{ inputs.layer_directory }}/sample-apps
3839 ./build-lambda-layer.sh
3940 pip install tox
4041 tox
42+ - uses : actions/checkout@v4 # v4
4143 - name : Upload Layer to S3
4244 shell : bash
4345 run : |
Original file line number Diff line number Diff line change 2525 scan_and_report :
2626 runs-on : ubuntu-latest
2727 steps :
28+ # - uses: actions/checkout@v4
2829 - name : Checkout repo for dependency scan
2930 uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # 5.0.0
3031 with :
3536 with :
3637 python-version : " 3.10"
3738
39+ # - uses: actions/checkout@v4 #v4
3840 - name : Create requirements.txt for dependency scan
3941 run : |
4042 python -m venv env
@@ -49,14 +51,16 @@ jobs:
4951 java-version : 17
5052 distribution : ' temurin'
5153
54+ - uses : actions/checkout@v4 # v4
55+
5256 - name : Configure AWS credentials for dependency scan
5357 uses : aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # 5.0.0
5458 with :
5559 role-to-assume : ${{ secrets.SECRET_MANAGER_ROLE_ARN }}
5660 aws-region : ${{ env.AWS_DEFAULT_REGION }}
5761
5862 - name : Get NVD API key for dependency scan
59- uses : aws-actions/aws-secretsmanager-get-secrets@a9a7eb4e2f2871d30dc5b892576fde60a2ecc802 # v2.0.10
63+ uses : aws-actions/aws-secretsmanager-get-secrets@2
6064 id : nvd_api_key
6165 with :
6266 secret-ids : ${{ secrets.NVD_API_KEY_SECRET_ARN }}
99103 severity : ' CRITICAL,HIGH'
100104 logout : ' false'
101105
106+ - uses : actions/checkout@v4
102107 - name : Perform low image scan
103108 if : always()
104109 id : low_scan
You can’t perform that action at this time.
0 commit comments