-
-
Notifications
You must be signed in to change notification settings - Fork 5
49 lines (40 loc) · 1.44 KB
/
report.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
# report the data stored in the repository
name: Generate report
on:
push:
branches:
- main
paths:
- .github/workflows/report.yml
- .github/workflows/report.ps1
schedule:
- cron: '1 9 * * *'
workflow_dispatch:
jobs:
report:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Get App Token
id: get_workflow_token
uses: rajbos-actions/[email protected]
with:
application_id: 264650
application_private_key: ${{ secrets.Automation_App_Key }}
organization: actions-marketplace-validations
- shell: pwsh
name: Run reporting script
run: |
$actions=(cat status.json | ConvertFrom-Json)
Write-Host "Found [$($actions.Length)] actions in the datafile"
$token="${{ steps.get_workflow_token.outputs.token }}" # this one expires after an hour
$token="${{ secrets.ACCESS_TOKEN }}" # using this to prevent issues in the current run, as it takes 1h 42mins atm
./.github/workflows/report.ps1 -actions $actions -logSummary "$($env:GITHUB_STEP_SUMMARY)" -access_token_destination $token
- uses: actions/upload-artifact@v4
with:
name: report
path: VulnerableRepos-**.txt
- uses: actions/upload-artifact@v4
with:
name: SecretScanningAlerts
path: secretScanningAlerts.json