github security example workflow

examples/pipelines/ghas-project/kustomization.yaml → examples/pipelines/github-security-project/kustomization.yaml

@@ -5,9 +5,9 @@ nameSuffix: -ghas-project
 components:
   - pkg:helm/dracon-oss-components/base
   - pkg:helm/dracon-oss-components/git-clone
-  - pkg:helm/dracon-oss-components/producer-github-code-scanning
+  - pkg:helm/dracon-oss-components/producer-github-codeql
+  - pkg:helm/dracon-oss-components/producer-github-dependabot
   - pkg:helm/dracon-oss-components/producer-aggregator
   - pkg:helm/dracon-oss-components/enricher-codeowners
   - pkg:helm/dracon-oss-components/enricher-aggregator
-  - pkg:helm/dracon-oss-components/consumer-mongodb
-  - pkg:helm/dracon-oss-components/consumer-elasticsearch
+  - pkg:helm/dracon-oss-components/consumer-stdout-json

examples/pipelines/ghas-project/pipelinerun.yaml → examples/pipelines/github-security-project/pipelinerun.yaml

@@ -10,14 +10,20 @@ spec:
   params:
   - name: git-clone-url
     value: https://github.com/ocurity/e2e-monorepo.git
-  - name: producer-github-code-scanning-repository-owner
+  - name: producer-github-codeql-repository-owner
     value: ocurity
-  - name: producer-github-code-scanning-repository-name
+  - name: producer-github-codeql-repository-name
     value: e2e-monorepo
   # Insert your GitHub Personal Access Token (PAT) here
   # Note: Must have "Code scanning alerts" repository permissions (read).
-  - name: producer-github-code-scanning-github-token
-    value: github_pat_fake
+  - name: producer-github-codeql-github-token
+    value: $github_pat_permissions_to_read_alerts_and_repos
+  - name: producer-github-dependabot-repository-owner
+    value: ocurity
+  - name: producer-github-dependabot-repository-name
+    value: e2e-monorepo
+  - name: producer-github-dependabot-github-token
+    value: $github_pat_permissions_to_read_alerts_and_repos
   workspaces:
   - name: output
     subPath: source-code