From d8e8c5405ecb11d40dc9b5765cf3d791fe18dd94 Mon Sep 17 00:00:00 2001 From: sg Date: Tue, 8 Oct 2024 13:01:28 +0100 Subject: [PATCH] github security example workflow --- .../kustomization.yaml | 6 +++--- .../pipelinerun.yaml | 14 ++++++++++---- 2 files changed, 13 insertions(+), 7 deletions(-) rename examples/pipelines/{ghas-project => github-security-project}/kustomization.yaml (66%) rename examples/pipelines/{ghas-project => github-security-project}/pipelinerun.yaml (57%) diff --git a/examples/pipelines/ghas-project/kustomization.yaml b/examples/pipelines/github-security-project/kustomization.yaml similarity index 66% rename from examples/pipelines/ghas-project/kustomization.yaml rename to examples/pipelines/github-security-project/kustomization.yaml index 89ce5ab69..79c82b62e 100644 --- a/examples/pipelines/ghas-project/kustomization.yaml +++ b/examples/pipelines/github-security-project/kustomization.yaml @@ -5,9 +5,9 @@ nameSuffix: -ghas-project components: - pkg:helm/dracon-oss-components/base - pkg:helm/dracon-oss-components/git-clone - - pkg:helm/dracon-oss-components/producer-github-code-scanning + - pkg:helm/dracon-oss-components/producer-github-codeql + - pkg:helm/dracon-oss-components/producer-github-dependabot - pkg:helm/dracon-oss-components/producer-aggregator - pkg:helm/dracon-oss-components/enricher-codeowners - pkg:helm/dracon-oss-components/enricher-aggregator - - pkg:helm/dracon-oss-components/consumer-mongodb - - pkg:helm/dracon-oss-components/consumer-elasticsearch + - pkg:helm/dracon-oss-components/consumer-stdout-json diff --git a/examples/pipelines/ghas-project/pipelinerun.yaml b/examples/pipelines/github-security-project/pipelinerun.yaml similarity index 57% rename from examples/pipelines/ghas-project/pipelinerun.yaml rename to examples/pipelines/github-security-project/pipelinerun.yaml index e3b6384e9..efe9c471b 100644 --- a/examples/pipelines/ghas-project/pipelinerun.yaml +++ b/examples/pipelines/github-security-project/pipelinerun.yaml @@ -10,14 +10,20 @@ spec: params: - name: git-clone-url value: https://github.com/ocurity/e2e-monorepo.git - - name: producer-github-code-scanning-repository-owner + - name: producer-github-codeql-repository-owner value: ocurity - - name: producer-github-code-scanning-repository-name + - name: producer-github-codeql-repository-name value: e2e-monorepo # Insert your GitHub Personal Access Token (PAT) here # Note: Must have "Code scanning alerts" repository permissions (read). - - name: producer-github-code-scanning-github-token - value: github_pat_fake + - name: producer-github-codeql-github-token + value: $github_pat_permissions_to_read_alerts_and_repos + - name: producer-github-dependabot-repository-owner + value: ocurity + - name: producer-github-dependabot-repository-name + value: e2e-monorepo + - name: producer-github-dependabot-github-token + value: $github_pat_permissions_to_read_alerts_and_repos workspaces: - name: output subPath: source-code