diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml deleted file mode 100644 index 7310e4f..0000000 --- a/.github/workflows/codeql.yml +++ /dev/null @@ -1,38 +0,0 @@ -name: Kubelinter on Dev Branch - -on: - push: - branches: - - main - -jobs: - kubelinter: - runs-on: ubuntu-latest - - steps: - - name: Checkout code - uses: actions/checkout@v2 - - - name: Install Kubelinter - run: | - curl -Lo kubelinter.tar.gz https://github.com/stackrox/kube-linter/releases/latest/download/kube-linter-linux.tar.gz - tar -xzf kubelinter.tar.gz - chmod +x kube-linter - sudo mv kube-linter /usr/local/bin/ - - - name: lint and post a sarif report - run: | - kube-linter lint --output-format=sarif --output kube-linter-report.sarif - continue-on-error: true - - - name: Upload SARIF report - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: kube-linter-report.sarif - - - name: Fail if the kube-linter report contains lines - run: | - if grep -q . kube-linter-report.txt; then - echo "kube-linter found issues in the repository" - exit 1 - fi \ No newline at end of file diff --git a/.github/workflows/kubelinter.yml b/.github/workflows/kubelinter.yml index 7310e4f..6084c63 100644 --- a/.github/workflows/kubelinter.yml +++ b/.github/workflows/kubelinter.yml @@ -13,26 +13,14 @@ jobs: - name: Checkout code uses: actions/checkout@v2 - - name: Install Kubelinter - run: | - curl -Lo kubelinter.tar.gz https://github.com/stackrox/kube-linter/releases/latest/download/kube-linter-linux.tar.gz - tar -xzf kubelinter.tar.gz - chmod +x kube-linter - sudo mv kube-linter /usr/local/bin/ - - - name: lint and post a sarif report - run: | - kube-linter lint --output-format=sarif --output kube-linter-report.sarif - continue-on-error: true + - name: Scan repo with kube-linter + uses: stackrox/kube-linter-action@v1.0.4 + with: + directory: . + format: sarif + output-file: kube-linter-results.sarif - - name: Upload SARIF report + - name: Upload kube-linter results uses: github/codeql-action/upload-sarif@v3 with: - sarif_file: kube-linter-report.sarif - - - name: Fail if the kube-linter report contains lines - run: | - if grep -q . kube-linter-report.txt; then - echo "kube-linter found issues in the repository" - exit 1 - fi \ No newline at end of file + sarif_file: kube-linter-results.sarif