github-action/action.yml at main · constableapp/github-action · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
name: 'Constable Analyze'
description: 'Run Constable Analyze'
inputs:
  constable-api-key:
    description: 'Your constable API Key'
    required: true
  terraform-module-root:
    description: 'root of the terraform file'
    required: true
  aws-access-key-id:
    description: 'AWS_ACCESS_KEY_ID'
    required: true
  aws-secret-access-key:
    description: 'AWS_SECRET_ACCESS_KEY'
    required: true
  github-ref:
    description: "Pass the GITHUB_REF environment variable"
    required: true
  github-repository:
    description: "Pass the GITHUB_REPOSITORY environment variable"
    required: true
  github-sha:
    description: "Pass the GITHUB_SHA environment variable"
    required: true
runs:
  using: 'docker'
  image: 'docker://ghcr.io/bigbadwolfsecurity/brickhouse/cli:latest'
  args:
    - analyze
    - ${{ inputs.terraform-module-root }}
    - --force
    - --api_key
    - ${{ inputs.constable-api-key }}
    - --github_ref
    - ${{ inputs.github-ref }}
    - --github_repository
    - ${{ inputs.github-repository }}
    - --github_sha
    - ${{ inputs.github-sha }}
  env:
    AWS_ACCESS_KEY_ID: ${{ inputs.aws-access-key-id }}
    AWS_SECRET_ACCESS_KEY: ${{ inputs.aws-secret-access-key }}