Skip to content

Commit

Permalink
add ignore exit fail for results
Browse files Browse the repository at this point in the history
  • Loading branch information
wreet committed Oct 25, 2022
1 parent 020e30e commit 60d41ec
Showing 1 changed file with 29 additions and 0 deletions.
29 changes: 29 additions & 0 deletions .github/workflows/kics-iac.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
name: kics scanning
on:
push:
branches: dev
jobs:
kics:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: run kics Scan
uses: checkmarx/[email protected]
with:
path: .
ignore_on_exit: results
output_path: res/
- name: display kics results
run: |
cat res/results.json
- name: upload scan results
run: |
set -eu
apt-get update
apt-get install awscli -y
KEY="`date +%Y`/`date +%m`/`date +%d`/${GITHUB_REPOSITORY#*/}_${GITHUB_REF#refs/heads/}_kics_`date +%s`.json"
echo "[i] writing to s3 object '$KEY'"
mv res/results.json res/${KEY#*/*/*/*}
export AWS_ACCESS_KEY_ID=${{ secrets.VULN_REPORTS_AWS_KEY_ID }}
export AWS_SECRET_ACCESS_KEY=${{ secrets.VULN_REPORTS_AWS_SECRET_ACCESS_KEY }}
aws s3 cp res/${KEY#*/*/*/*} s3://${{ secrets.VULN_REPORTS_AWS_BUCKET }}/$KEY

0 comments on commit 60d41ec

Please sign in to comment.