From ee1cd98d0a4aff3bcfc0b2cc647b4dceccb639cc Mon Sep 17 00:00:00 2001 From: Thomas Beck <37094168+thethomasbeck@users.noreply.github.com> Date: Fri, 29 Oct 2021 11:58:04 -0500 Subject: [PATCH] Create main.yml --- .github/workflows/main.yml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 .github/workflows/main.yml diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml new file mode 100644 index 0000000..2ac90fd --- /dev/null +++ b/.github/workflows/main.yml @@ -0,0 +1,28 @@ +name: Prisma Cloud IaC Scan Example +on: [ pull_request ] + +jobs: + prisma_cloud_iac_scan: + runs-on: ubuntu-latest + name: Run Prisma Cloud IaC Scan to check + steps: + - name: Checkout + uses: actions/checkout@v2 + - name: Run Scan on IaC files in the repository + uses: prisma-cloud-shiftleft/iac-scan-action@v1 + id: iac-scan + with: + prisma_api_url: 'https://api.prismacloud.io' + access_key: ${{ secrets.PRISMA_CLOUD_ACCESS_KEY }} + secret_key: ${{ secrets.PRISMA_CLOUD_SECRET_KEY }} + asset_name: 'my-asset-name' + template_type: 'TF' + template_version: '0.13' + scan_path: '/' + use_scan_path_when_pr: true + - name: Upload scan result artifact + uses: actions/upload-artifact@v2 + if: success() || failure() + with: + name: iac_scan_result + path: ${{ steps.iac-scan.outputs.iac_scan_result_path }}