add Scc profile in Quickstart OCP DA

[arya-girish-k]

Description

Git_issue

Release required?

• No release
• Patch release (x.x.X)
• Minor release (x.X.x)
• Major release (X.x.x)

Release notes content

Run the pipeline

If the CI pipeline doesn't run when you create the PR, the PR requires a user with GitHub collaborators access to run the pipeline.

Run the CI pipeline when the PR is ready for review and you expect tests to pass. Add a comment to the PR with the following text:

/run pipeline

Checklist for reviewers

• If relevant, a test for the change is included or updated with this PR.
• If relevant, documentation for the change is included or updated with this PR.

For mergers

• Use a conventional commit message to set the release level. Follow the guidelines.
• Include information that users need to know about the PR in the commit message. The commit message becomes part of the GitHub release notes.
• Use the Squash and merge option.

[arya-girish-k]

/run pipeline

[arya-girish-k]

/run pipeline

[arya-girish-k]

Tried this approach

1. add compliance to ibm_catalog.json in a branch
2. Onboard it to catalog
3. Validate it
4. Run SCC scan
5. Attach scan to the DA

Note:When you attach a scan, it will check what controls were passing and attach them to the tile, showing them in the Security and Compliance tab.

We faced an intermittent issue

CMX1100036 - Not all workspace resources were present in the applied scan.

Still it has one passing control

Since 1 control is passing, it is attached to the Security and Compliance tab.

[arya-girish-k]

Pipeline is failing due to this error,

[Aayush-Abhyarthi]

/run pipeline

[Aayush-Abhyarthi]

/run pipeline

[terraform-ibm-modules-ops]

🎉 This PR is included in version 3.55.6 🎉

The release is available on:

• GitHub release
• v3.55.6

Your semantic-release bot 📦🚀