Skip to content

Commit

Permalink
Add CI linting and security scan
Browse files Browse the repository at this point in the history
  • Loading branch information
sbreker committed Apr 17, 2024
1 parent 82578f3 commit 35ff9c6
Showing 1 changed file with 44 additions and 0 deletions.
44 changes: 44 additions & 0 deletions .github/workflows/lint.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,44 @@
name: Lint and Security Check

Check failure on line 1 in .github/workflows/lint.yml

View workflow job for this annotation

GitHub Actions / Run Checkov for Dockerfile Security Analysis

CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"

on:
push:
pull_request:
branches:
- main

jobs:
shellcheck:
name: Lint Shell Scripts with ShellCheck
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v3

- name: Run ShellCheck
uses: ludeeus/action-shellcheck@master

hadolint:
name: Lint Dockerfiles with Hadolint
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v3

- name: Run Hadolint with GitHub Action
uses: hadolint/[email protected]
with:
recursive: true
failure-threshold: error

checkov:
name: Run Checkov for Dockerfile Security Analysis
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v3

- name: Run Checkov with GitHub Action
uses: bridgecrewio/checkov-action@master
with:
directory: .
quiet: false

0 comments on commit 35ff9c6

Please sign in to comment.