Skip to content

Conversation

@vicenteherrera
Copy link
Contributor

@vicenteherrera vicenteherrera commented Oct 1, 2020

This PR adds a GitHub Code Scan workflow to Git Hub actions for the repository, to look for vulnerabilities in the code and libraries used, with the following characteristics:

  • It will scan the repository for vulnerabilities periodically (in case the vulnerability db updates with new ones), each Friday at 6:00 AM.
  • It will trigger on push or pull requests to master
  • It will scan go language files (autodetected supported programming language)
  • It is non blocking, meaning that a detection will not block the pipeline
  • Security alerts can be checked at: https://github.com/sysdiglabs/terraform-provider-sysdig/security/code-scanning

@vicenteherrera vicenteherrera changed the title Added GH Code Scan action ci: Added GH Code Scan action Oct 1, 2020
Copy link
Member

@tembleking tembleking left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks @vicenteherrera!

@tembleking tembleking merged commit f75093c into master Oct 27, 2020
@tembleking tembleking deleted the gh_code_scan branch November 3, 2020 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants