[#227] Migrate from tfsec to Trivy #41
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test Generated Project | |
| on: | |
| pull_request: | |
| types: [opened, synchronize] | |
| # env: | |
| # TERRAFORM_VERSION: "1.5.5" | |
| jobs: | |
| test-generated-project: | |
| name: Run Tests Generated Project | |
| strategy: | |
| matrix: | |
| node-version: [16.x, 18.x] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout the repository | |
| uses: actions/checkout@v4 | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: 'npm' | |
| - name: Cache Node npm | |
| uses: actions/cache@v3 | |
| with: | |
| path: node_modules | |
| key: ${{ runner.os }}-infrastructure-templates-node-${{ hashFiles('**/package-lock.json') }} | |
| restore-keys: | | |
| ${{ runner.os }}-infrastructure-templates | |
| - name: Install modules | |
| run: npm ci | |
| - name: Generate project | |
| run: . ./scripts/generateAdvancedAWS.sh | |
| - name: Install dependencies in .tool-versions | |
| uses: asdf-vm/actions/install@v2 | |
| - name: Run Terraform format | |
| run: terraform fmt -recursive -check | |
| - name: Run check files | |
| run: cd aws-advanced-test && ls -l && cat ./modules/alb/main.tf | |
| - name: Install trivy | |
| run: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.48.3 | |
| - name: Run trivy linter | |
| run: cd aws-advanced-test && trivy config . |