From 780420f580d53765b5d2823572cfc84909f14677 Mon Sep 17 00:00:00 2001 From: Caroline6312 Date: Wed, 12 Mar 2025 15:49:30 -0700 Subject: [PATCH 1/3] Add vulnerability scan --- .../vulnerability-scan-failure-notify.yaml | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/vulnerability-scan-failure-notify.yaml diff --git a/.github/workflows/vulnerability-scan-failure-notify.yaml b/.github/workflows/vulnerability-scan-failure-notify.yaml new file mode 100644 index 0000000..471abfe --- /dev/null +++ b/.github/workflows/vulnerability-scan-failure-notify.yaml @@ -0,0 +1,24 @@ +name: Vulnerability Scan Failure Slack Notify +on: + push: + workflow_dispatch: + inputs: + vulnerability_severity: + description: The severity to fail the workflow if such vulnerability is detected. DO NOT override it unless a Jira ticket is raised. DO NOT use 'CRITICAL' unless a Jira ticket is raised. + type: choice + options: + - CRITICAL,HIGH + - CRITICAL,HIGH,MEDIUM + - CRITICAL + default: 'CRITICAL,HIGH' + schedule: + - cron: '0 16 * * *' # 9:00 AM GMT -7 + - cron: '0 0 * * *' # 5:00 PM GMT -7 + +jobs: + vulnerability-scan-failure-notify: + uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-vulnerability-scan-failure-notify.yaml@v3 + secrets: + SLACK_WEBHOOK : ${{ secrets.SLACK_WEBHOOK }} + with: + scan_type : image From 45862332fdbb863c9fc1c14330384cfd9cad3998 Mon Sep 17 00:00:00 2001 From: Caroline6312 Date: Wed, 12 Mar 2025 15:56:04 -0700 Subject: [PATCH 2/3] Change to fs --- .github/workflows/vulnerability-scan-failure-notify.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/vulnerability-scan-failure-notify.yaml b/.github/workflows/vulnerability-scan-failure-notify.yaml index 471abfe..db9e5c8 100644 --- a/.github/workflows/vulnerability-scan-failure-notify.yaml +++ b/.github/workflows/vulnerability-scan-failure-notify.yaml @@ -21,4 +21,4 @@ jobs: secrets: SLACK_WEBHOOK : ${{ secrets.SLACK_WEBHOOK }} with: - scan_type : image + scan_type : fs From e6c7a309600026d33de756709ffb4b2250c2fb39 Mon Sep 17 00:00:00 2001 From: Caroline6312 Date: Wed, 12 Mar 2025 20:55:37 -0700 Subject: [PATCH 3/3] Remove push --- .github/workflows/vulnerability-scan-failure-notify.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/vulnerability-scan-failure-notify.yaml b/.github/workflows/vulnerability-scan-failure-notify.yaml index db9e5c8..6704b91 100644 --- a/.github/workflows/vulnerability-scan-failure-notify.yaml +++ b/.github/workflows/vulnerability-scan-failure-notify.yaml @@ -1,6 +1,5 @@ name: Vulnerability Scan Failure Slack Notify on: - push: workflow_dispatch: inputs: vulnerability_severity: