Skip to content

Commit ab71a76

Browse files
committed
testing with 12 version
1 parent abd4172 commit ab71a76

File tree

1 file changed

+14
-15
lines changed

1 file changed

+14
-15
lines changed
Lines changed: 14 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,50 +1,49 @@
1-
name: "ARM template toolkit test"
1+
name: "ARM template tests"
22

33
on: [pull_request]
44

55
jobs:
6-
security-test:
7-
name: "ARM template security tests"
6+
best-practices-test:
7+
name: "ARM template tests using arm-ttk"
88
runs-on: "ubuntu-latest"
99
steps:
1010
- name: Checkout repo
1111
uses: actions/checkout@v4
1212

1313
- name: Test ARM Templates using arm-ttk
1414
id: filestest
15-
continue-on-error: true
1615
uses: aliencube/arm-ttk-actions@v0.3
1716
with:
1817
path: EventHubs/src/azuredeploy_metrics.json
1918

20-
- name: Test result - files
21-
shell: bash
22-
continue-on-error: true
23-
run: |
24-
echo "${{ toJSON(fromJSON(steps.filestest.outputs.results)) }}"
19+
security-test:
20+
name: "ARM template tests using checkov"
21+
runs-on: "ubuntu-latest"
22+
steps:
23+
- name: Checkout repo
24+
uses: actions/checkout@v4
2525

2626
- name: Test ARM Templates using checkov
2727
id: checkov
28-
continue-on-error: true
29-
uses: bridgecrewio/checkov-action@master
28+
uses: bridgecrewio/checkov-action@v12
3029
with:
3130
directory: EventHubs/src/
3231
file: EventHubs/src/azuredeploy_metrics.json # optional: provide the path for resource to be scanned. This will override the directory if both are provided.
3332
#check: CKV_AWS_1 # optional: run only a specific check_id. can be comma separated list
3433
#skip_check: CKV_AWS_2 # optional: skip a specific check_id. can be comma separated list
3534
quiet: false # optional: display only failed checks
36-
soft_fail: true # optional: do not return an error code if there are failed checks
35+
# soft_fail: true # optional: do not return an error code if there are failed checks
3736
framework: arm # optional: run only on a specific infrastructure {cloudformation,terraform,kubernetes,all}
3837
#skip_framework: terraform # optional: skip a specific infrastructure {cloudformation,terraform,kubernetes,all}
3938
#skip_cve_package: CVE_2019_8331 # optional: skip a specific CVE package in SCA scans, can be comma separated list
40-
output_format: cli # optional: the output format, one of: cli, json, junitxml, github_failed_only, or sarif. Default: sarif
39+
output_format: cli,json # optional: the output format, one of: cli, json, junitxml, github_failed_only, or sarif. Default: sarif
4140
#output_file_path: reports/results.sarif # folder and name of results file
4241
output_bc_ids: true # optional: output Bridgecrew platform IDs instead of checkov IDs
4342
#download_external_modules: true # optional: download external terraform modules from public git repositories and terraform registry
4443
#repo_root_for_plan_enrichment: example/ #optional: Directory containing the hcl code used to generate a given terraform plan file. Use together with `file`
4544
#var_file: ./testdir/gocd.yaml # optional: variable files to load in addition to the default files. Currently only supported for source Terraform and Helm chart scans.
46-
log_level: DEBUG # optional: set log level. Default WARNING
45+
# log_level: DEBUG # optional: set log level. Default WARNING
4746
#config_file: path/this_file
4847
#baseline: cloudformation/.checkov.baseline # optional: Path to a generated baseline file. Will only report results not in the baseline.
4948
#container_user: 1000 # optional: Define what UID and / or what GID to run the container under to prevent permission issues
50-
#use_enforcement_rules: true # optional - use enforcement rule configs from the platform
49+
#use_enforcement_rules: true # optional - use enforcement rule configs from the platform

0 commit comments

Comments
 (0)