|
| 1 | +# https://github.com/advanced-security/policy-as-code |
| 2 | + |
| 3 | +name: Policy-as-Code-POC |
| 4 | + |
| 5 | +on: |
| 6 | + workflow_dispatch: |
| 7 | + pull_request: |
| 8 | + |
| 9 | +permissions: |
| 10 | + contents: read |
| 11 | + security-events: read |
| 12 | + # pull request summaries |
| 13 | + pull-requests: write |
| 14 | + |
| 15 | +env: |
| 16 | +# BUILD_NUMBER: ${{ github.run_number }} |
| 17 | +# BRANCH_NAME: ${{ github.head_ref || github.ref_name }} |
| 18 | +# CURRENT_COMMIT: ${{github.sha}} |
| 19 | +# GIT_AUTHOR: ${{github.actor}} |
| 20 | + ACTIONS_STEP_DEBUG: true |
| 21 | + DEBUG: true |
| 22 | + |
| 23 | +jobs: |
| 24 | + Testing-PAC: |
| 25 | + runs-on: [ Linux ] |
| 26 | + steps: |
| 27 | + # - name: checkout |
| 28 | + # uses: actions/checkout@v3 |
| 29 | + |
| 30 | + # - name: Set Python3 Alias |
| 31 | + # run: Set-Alias -Name python3 -Value python |
| 32 | + |
| 33 | + # - name: Check Python 3 version |
| 34 | + # run: | |
| 35 | + # Set-Alias -Name python3 -Value python |
| 36 | + # & python3 --version |
| 37 | + # shell: pwsh |
| 38 | + - name: check python version |
| 39 | + run: python3 --version |
| 40 | + |
| 41 | + - name: Advanced Security Policy as Code |
| 42 | + uses: Training/policy-as-code@main |
| 43 | + with: |
| 44 | + # severity: Notes |
| 45 | + # The owner/repo of where the policy is stored |
| 46 | + # policy: Training/test-re-pac-poc |
| 47 | + # The local path (within the workspace) or repository |
| 48 | + # policy-path: policies/policy.yml |
| 49 | + # The branch you want to target |
| 50 | + policy-branch: master |
| 51 | + token: ${{ secrets.TEST_FINE }} |
| 52 | + # [optional] Additional arguments |
| 53 | + # --disable-code-scanning |
| 54 | + # --disable-dependencies --disable-dependabot --disable-dependency-licensing |
| 55 | + #. --disable-secret-scanning |
| 56 | + argvs: "--disable-dependabot --disable-dependencies --disable-secret-scanning --disable-code-scanning" |
0 commit comments