From a3c0d1ae5bf6f0d8ea76558ca2e0280e86918546 Mon Sep 17 00:00:00 2001 From: Sebastian Czech Date: Sat, 16 Nov 2024 20:49:39 +0100 Subject: [PATCH] ci: Add Super Linter --- .checkov.yaml | 6 ++++++ .github/workflows/pre-commit.yml | 23 +++++++++++++++++++++++ 2 files changed, 29 insertions(+) create mode 100644 .checkov.yaml diff --git a/.checkov.yaml b/.checkov.yaml new file mode 100644 index 0000000..e0e0d62 --- /dev/null +++ b/.checkov.yaml @@ -0,0 +1,6 @@ +framework: + - all + +skip-check: + +soft-fail: true diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index e281cd8..46bd7f0 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -26,6 +26,29 @@ permissions: statuses: none jobs: + superLinter: + name: Lint + runs-on: ubuntu-latest + + permissions: + contents: read + packages: read + statuses: write + + steps: + - name: Checkout code + uses: actions/checkout@v4 + with: + fetch-depth: 0 + + - name: Super-linter + uses: super-linter/super-linter@v7.1.0 + env: + VALIDATE_CHECKOV: ${{ vars.VALIDATE_CHECKOV }} + VALIDATE_GITLEAKS: ${{ vars.VALIDATE_GITLEAKS }} + VALIDATE_YAML: ${{ vars.VALIDATE_YAML }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + collectInputs: name: Collect workflow inputs runs-on: ubuntu-latest