Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding Kubescape GitHub action to show security problems and misconfigurations in the GitHub Security tab #114

Open
wants to merge 9 commits into
base: master
Choose a base branch
from
Open

Adding Kubescape GitHub action to show security problems and misconfigurations in the GitHub Security tab #114

Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
c3f4e0e
Adding miscofiguration scanning to enable viewing the issues in GitHub
slashben Apr 20, 2023
9c0f01d
excluding CIS from results
slashben Apr 20, 2023
39c6263
fixing property name
slashben Apr 20, 2023
f9f1368
misplaced property
slashben Apr 20, 2023
89bd7be
core(workflows): Adding permissions
Apr 23, 2023
3bf6b9a
Merge pull request #1 from dwertent/patch-1
slashben Apr 23, 2023
5bfcb8b
adding write privileges to cover event
slashben Apr 23, 2023
7a4e2e2
Merge branch 'madhuakula:master' into master
slashben Jun 17, 2023
7b57ad7
Merge branch 'madhuakula:master' into master
slashben Feb 14, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions .github/workflows/example-yaml-scanning.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
name: Kubescape scanning for misconfigurations
on: [push, pull_request]
jobs:
kubescape-scan:
permissions:
contents: write
pull-requests: write
security-events: write
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: kubescape/github-action@main
continue-on-error: true
with:
frameworks: AllControls
format: sarif
outputFile: results.sarif
- name: Upload Kubescape scan results to Github Code Scanning
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: results.sarif