diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml new file mode 100644 index 0000000..2ac90fd --- /dev/null +++ b/.github/workflows/main.yml @@ -0,0 +1,28 @@ +name: Prisma Cloud IaC Scan Example +on: [ pull_request ] + +jobs: + prisma_cloud_iac_scan: + runs-on: ubuntu-latest + name: Run Prisma Cloud IaC Scan to check + steps: + - name: Checkout + uses: actions/checkout@v2 + - name: Run Scan on IaC files in the repository + uses: prisma-cloud-shiftleft/iac-scan-action@v1 + id: iac-scan + with: + prisma_api_url: 'https://api.prismacloud.io' + access_key: ${{ secrets.PRISMA_CLOUD_ACCESS_KEY }} + secret_key: ${{ secrets.PRISMA_CLOUD_SECRET_KEY }} + asset_name: 'my-asset-name' + template_type: 'TF' + template_version: '0.13' + scan_path: '/' + use_scan_path_when_pr: true + - name: Upload scan result artifact + uses: actions/upload-artifact@v2 + if: success() || failure() + with: + name: iac_scan_result + path: ${{ steps.iac-scan.outputs.iac_scan_result_path }}