From aa1f5926cc0bb0c00d40d0db660ffa72e0da2381 Mon Sep 17 00:00:00 2001 From: Sam Benjamin Pragasam Date: Wed, 22 May 2024 15:25:09 +0530 Subject: [PATCH 1/4] onboard palo alto image scan --- PA-image-scan/action.yaml | 57 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) create mode 100644 PA-image-scan/action.yaml diff --git a/PA-image-scan/action.yaml b/PA-image-scan/action.yaml new file mode 100644 index 0000000..aa62036 --- /dev/null +++ b/PA-image-scan/action.yaml @@ -0,0 +1,57 @@ +name: Palo Alto Image Scan +description: 'Palo Alto Image Scan' +inputs: + image-name: + description: 'image to be scanned' + required: true + tag: + description: 'image tag' + required: false + pcc_console_url: + description: 'Palo Alto console URL' + required: 'false' + pcc_user: + description: 'Palo Alto Access Key' + required: 'false' + pcc_pass: + description: 'Palo Alto Secret key' + required: 'false' + project: + description: 'Tenant project context for the command' + required: 'false' + results_file: + description: 'File to which scan results are written in JSON. Default pcc_scan_results.json' + required: 'false' + sarif_file: + description: 'File to which scan results are written in SARIF. Default pcc_scan_results.sarif.json' + required: 'false' + twistcli_debug: + description: 'Activate the debug flag for prisma cli (by default deactivated)' + required: 'false' + +runs: + using: "composite" + steps: + - uses: gradle/gradle-build-action@v2 + if: ${{ inputs.tag == '' }} + + - name: Determine container tag + id: tag + shell: bash + run: | + if [ -n "${{ inputs.tag }}" ]; then + echo "PA_IMAGE_TAG=${{ inputs.tag }}" >> $GITHUB_OUTPUT + else + echo "PA_IMAGE_TAG=$(./gradlew -q printDockerImageDefaultTag | head -1)" >> $GITHUB_OUTPUT + fi + + - name: Prisma Cloud image scan + id: scan + uses: PaloAltoNetworks/prisma-cloud-scan@v1.5 + with: + pcc_console_url: ${{ inputs.pcc_console_url }} + pcc_user: ${{ inputs.pcc_user }} + pcc_pass: ${{ inputs.pcc_pass }} + image_name: ${{ inputs.image_name }}:${{ steps.tag.outputs.PA_IMAGE_TAG }} + + From 477308bcd222ed4cd4cbda4c491f41ce164818fb Mon Sep 17 00:00:00 2001 From: Sam Benjamin Pragasam Date: Wed, 22 May 2024 15:32:01 +0530 Subject: [PATCH 2/4] Solve indexation error --- PA-image-scan/action.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/PA-image-scan/action.yaml b/PA-image-scan/action.yaml index aa62036..a34ab6c 100644 --- a/PA-image-scan/action.yaml +++ b/PA-image-scan/action.yaml @@ -46,12 +46,12 @@ runs: fi - name: Prisma Cloud image scan - id: scan - uses: PaloAltoNetworks/prisma-cloud-scan@v1.5 - with: - pcc_console_url: ${{ inputs.pcc_console_url }} - pcc_user: ${{ inputs.pcc_user }} - pcc_pass: ${{ inputs.pcc_pass }} - image_name: ${{ inputs.image_name }}:${{ steps.tag.outputs.PA_IMAGE_TAG }} + id: scan + uses: PaloAltoNetworks/prisma-cloud-scan@v1.5 + with: + pcc_console_url: ${{ inputs.pcc_console_url }} + pcc_user: ${{ inputs.pcc_user }} + pcc_pass: ${{ inputs.pcc_pass }} + image_name: ${{ inputs.image_name }}:${{ steps.tag.outputs.PA_IMAGE_TAG }} From 6c13fad6c2584b8bb73c998c744e4751dd480b70 Mon Sep 17 00:00:00 2001 From: Sam Benjamin Pragasam Date: Wed, 22 May 2024 17:22:20 +0530 Subject: [PATCH 3/4] rename image-name to image_name input to have uniformity --- PA-image-scan/action.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/PA-image-scan/action.yaml b/PA-image-scan/action.yaml index a34ab6c..08c604b 100644 --- a/PA-image-scan/action.yaml +++ b/PA-image-scan/action.yaml @@ -1,7 +1,7 @@ name: Palo Alto Image Scan description: 'Palo Alto Image Scan' inputs: - image-name: + image_name: description: 'image to be scanned' required: true tag: From 7210fcd55227488253c5b92bbcf39532263e28b7 Mon Sep 17 00:00:00 2001 From: Sam Benjamin Pragasam Date: Thu, 23 May 2024 15:16:49 +0530 Subject: [PATCH 4/4] change required false flag from string to boolean --- PA-image-scan/action.yaml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/PA-image-scan/action.yaml b/PA-image-scan/action.yaml index 08c604b..5e98871 100644 --- a/PA-image-scan/action.yaml +++ b/PA-image-scan/action.yaml @@ -9,25 +9,25 @@ inputs: required: false pcc_console_url: description: 'Palo Alto console URL' - required: 'false' + required: false pcc_user: description: 'Palo Alto Access Key' - required: 'false' + required: false pcc_pass: description: 'Palo Alto Secret key' - required: 'false' + required: false project: description: 'Tenant project context for the command' - required: 'false' + required: false results_file: description: 'File to which scan results are written in JSON. Default pcc_scan_results.json' - required: 'false' + required: false sarif_file: description: 'File to which scan results are written in SARIF. Default pcc_scan_results.sarif.json' - required: 'false' + required: false twistcli_debug: description: 'Activate the debug flag for prisma cli (by default deactivated)' - required: 'false' + required: false runs: using: "composite"