From c6e4cab393cdf92466786d94f8ebeeca1638bf8e Mon Sep 17 00:00:00 2001 From: cybershady Date: Sun, 11 Aug 2024 10:57:55 -0600 Subject: [PATCH] changes to tfsec gh action --- .github/workflows/tfsec.yml | 31 +++++++------------------------ 1 file changed, 7 insertions(+), 24 deletions(-) diff --git a/.github/workflows/tfsec.yml b/.github/workflows/tfsec.yml index bb68ca0..32a9446 100644 --- a/.github/workflows/tfsec.yml +++ b/.github/workflows/tfsec.yml @@ -1,35 +1,18 @@ -# This workflow uses actions that are not certified by GitHub. -# They are provided by a third-party and are governed by -# separate terms of service, privacy policy, and support -# documentation. - name: tfsec - on: push: - branches: [ "main" ] + branches: + - main pull_request: - branches: [ "main" ] - schedule: - - cron: '26 16 * * 5' - jobs: tfsec: - name: Run tfsec sarif report + name: tfsec runs-on: ubuntu-latest - permissions: - actions: read - contents: read - security-events: write steps: - name: Clone repo - uses: actions/checkout@v4 - - - name: Run tfsec - uses: aquasecurity/tfsec-sarif-action@21ded20e8ca120cd9d3d6ab04ef746477542a608 + uses: actions/checkout@master + - name: tfsec + uses: aquasecurity/tfsec-action@v1.0.0 with: - sarif_file: tfsec.sarif - - - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 \ No newline at end of file + soft_fail: true