Skip to content

Update main.yml

Update main.yml #28

Workflow file for this run

name: Prisma Cloud App Embedded Defender Deployment
on: [push, pull_request]
env:
IMAGE_NAME: ${{ github.repository }}:${{ github.sha }}
jobs:
# Jobs are ran independently from each other, so build and scan needs to be in a single job.
build-and-scan:
name: Build and scan image
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@v2
# Defaults are sufficient generally
# https://github.com/actions/checkout#usage
- name: Download twistcli from the Prisma Cloud Compute Console
run: |
curl --user ${{ secrets.PC_USER }}:${{ secrets.PC_PASS }} --output ./twistcli ${{ secrets.PC_CONSOLE }}/api/v1/util/twistcli
chmod a+x ./twistcli
- name: Update Dockerfile
run: |
./twistcli app-embedded embed \
--app-id $GITHUB_REPOSITORY \
--user ${{ secrets.PC_USER }} \
--password ${{ secrets.PC_PASS }} \
--address ${{ secrets.PC_CONSOLE }} \
--data-folder /twistlock \
--output-file embedded.zip \
Dockerfile
- name: Rename existing Dockerfile
run: mv Dockerfile Dockerfile.original
- name: Extract created zip
run: unzip embedded.zip
- name: ls
run: ls
- name: cat
run: cat Dockerfile
#- name: Build the image
# run: docker build -t $IMAGE_NAME .
#- name: Scan the image
# run: ./twistcli images scan --address ${{ secrets.PC_CONSOLE }} --user ${{ secrets.PC_USER }} --password ${{ secrets.PC_PASS }} --details $IMAGE_NAME