You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+13-7Lines changed: 13 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,7 +10,7 @@ This repository contains a GitHub Action for using Lacework's code security offe
10
10
11
11
Before attempting to run this action, you should add three secrets `LW_ACCOUNT_NAME`, `LW_API_KEY` and `LW_API_SECRET` to your GitHub repository (or, better yet, your GitHub organization so they can be shared accross all your repositories). The value for these secrets can be obtained by following the instructions [here](https://docs.lacework.com/console/api-access-keys) to create an API key and then download it.
12
12
13
-
### On pull requests
13
+
### Running on pull requests
14
14
15
15
To run an analysis on pull requests that highlights new alerts, create a file called `.github/workflows/lacework-code-security-pr.yml` with this content:
16
16
@@ -23,14 +23,14 @@ permissions:
23
23
pull-requests: write
24
24
25
25
env:
26
-
LW_ACCOUNT_NAME: ${{ secrets._LW_ACCOUNT_NAME }}
26
+
LW_ACCOUNT_NAME: ${{ secrets.LW_ACCOUNT_NAME }}
27
27
LW_API_KEY: ${{ secrets.LW_API_KEY }}
28
28
LW_API_SECRET: ${{ secrets.LW_API_SECRET }}
29
29
30
30
name: Lacework Code Security (PR)
31
31
jobs:
32
32
run-analysis:
33
-
runs-on: ubuntu-20.04
33
+
runs-on: ubuntu-latest
34
34
name: Run analysis
35
35
strategy:
36
36
matrix:
@@ -48,7 +48,7 @@ jobs:
48
48
with:
49
49
target: ${{ matrix.target }}
50
50
display-results:
51
-
runs-on: ubuntu-20.04
51
+
runs-on: ubuntu-latest
52
52
name: Display results
53
53
needs:
54
54
- run-analysis
@@ -60,14 +60,20 @@ jobs:
60
60
token: ${{ secrets.GITHUB_TOKEN }}
61
61
```
62
62
63
-
### On push
63
+
### Running on push or in scheduled mode
64
64
65
-
To run an analysis on pushes that logs alerts, create a file called `.github/workflows/lacework-code-security-push.yml` with this content:
65
+
To run an analysis on pushes or on a scheduled fashion and upload findings to the Lacework UI, create a file called `.github/workflows/lacework-code-security-push.yml` with this content:
0 commit comments