ghscan/ghscan.yaml at main · chainguard-dev/ghscan · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
package:
  name: ghscan
  version: "0.1.0"
  epoch: 1
  description: Scan Workflow logs for IOCs from the tj-actions/changed-files breach
  copyright:
    - license: Apache-2.0

environment:
  contents:
    keyring:
      - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub
    repositories:
      - https://packages.wolfi.dev/os

pipeline:
  - uses: git-checkout
    with:
      repository: https://github.com/chainguard-dev/ghscan
      expected-commit: bf0fb207b7f711d256ecb6463e645426a0e3db01
      tag: v${{package.version}}

  - uses: go/build
    with:
      packages: ./cmd/ghscan
      output: ghscan

test:
  pipeline:
    - name: Verify ghscan version
      runs: |
        ghscan -h

update:
  enabled: true
  github:
    identifier: chainguard-dev/ghscan
    strip-prefix: v