Skip to content

add inspector id

add inspector id #59

Workflow file for this run

name: Test Compiled Go Binary Use Case
# This workflow tests that the action can successfully
# scan a GitHub repository. This workflow runs automatically
# every 6 hours, and on pushes.
on:
schedule:
- cron: '0 */6 * * *' # runs every 6 hours
push:
branches: #
- '*'
jobs:
daily_job:
runs-on: ubuntu-latest
environment:
name: plugin-development
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
with:
aws-region: ${{ secrets.AWS_REGION }}
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
# TODO: use an IAM role
- name: Test Repository Scan
id: inspector
uses: aws/amazon-inspector-github-actions-plugin@main
# TODO: update this to point to public v1.0.0 release
with:
artifact_type: 'binary'
artifact_path: 'entrypoint/tests/test_data/artifacts/binaries/inspector-sbomgen'
- name: Display scan results
run: cat ${{ steps.inspector.outputs.inspector_scan_results }}
- name: Validate scan content
run: python3 validator/validate_inspector_scan.py --file ${{ steps.inspector.outputs.inspector_scan_results }}
# only run if the previous step failed
- name: Notify maintainers of validation failure
if: ${{ failure() }}
run: echo "this feature is not implemented"
# TODO: add steps to send notification to a Lambda to cut a ticket on job failure