Skip to content

Various MS changes. Enable debug #199

Various MS changes. Enable debug

Various MS changes. Enable debug #199

Workflow file for this run

---
name: Lint
on:
push:
workflow_dispatch:
jobs:
build-services:
name: Lint
runs-on: ubuntu-latest
permissions: write-all
strategy:
matrix:
chart: [accumulo, audit, authorization, cache, configuration, datawave-monolith, dictionary, hadoop, ingest, mysql, rabbitmq, zookeeper]
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
# super-linter needs the full git history to get the
# list of files that changed across commits
fetch-depth: 0
- name: Install Helm
uses: azure/[email protected]
with:
version: '3.12.0' # default is latest (stable)
id: install
- name: Login to GitHub Container Registry
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ github.token }}
- name: Create results directory for SARIF report files
shell: bash
run: mkdir -p results
- name: Update helm dependencies
shell: bash
run: |
cd ${{ matrix.chart }}
helm dependency update
cd ..
- name: Scan yaml files with kube-linter
uses: stackrox/[email protected]
id: kube-linter-action-scan
with:
# Adjust this directory to the location where your kubernetes resources and helm charts are located.
directory: ${{ matrix.chart }}
# Adjust this to the location of kube-linter config you're using, or remove the setting if you'd like to use
# the default config.
config: .kube-lint-config.yaml
# The following two settings make kube-linter produce scan analysis in SARIF format which would then be
# made available in GitHub UI via upload-sarif action below.
format: sarif
output-file: results/kube-linter-${{ matrix.chart }}.sarif
# The following line prevents aborting the workflow immediately in case your files fail kube-linter checks.
# This allows the following upload-sarif action to still upload the results to your GitHub repo.
continue-on-error: true
- name: Upload SARIF report files to GitHub
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: results/kube-linter-${{ matrix.chart }}.sarif
# Ensure the workflow eventually fails if files did not pass kube-linter checks.
- name: Verify kube-linter-action succeeded
shell: bash
run: |
echo "If this step fails, kube-linter found issues. Check the output of the scan step above."
[[ "${{ steps.kube-linter-action-scan.outcome }}" == "success" ]]