From f9ea16ef7f699313049a3137f8cc001e1e81c7af Mon Sep 17 00:00:00 2001 From: htrgouvea Date: Fri, 22 Sep 2023 10:18:44 -0300 Subject: [PATCH 1/4] update version --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 16990a9..890f1df 100644 --- a/README.md +++ b/README.md @@ -6,7 +6,7 @@ - +

@@ -75,7 +75,7 @@ $ sudo cpanm --installdeps . # Basic usage $ perl security-gate.pl --help -Security Gate v0.0.1 +Security Gate v0.0.2 Core Commands ============== Command Description From 0bd7fe16fdac16e14819bcce7c49ca58b2562e74 Mon Sep 17 00:00:00 2001 From: htrgouvea Date: Fri, 22 Sep 2023 10:19:58 -0300 Subject: [PATCH 2/4] create workflow for dependabot --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..d603467 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: docker + directory: / + schedule: + interval: weekly + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly \ No newline at end of file From 1362a06bce1b57f2836ce0e98b2938dbaa4729a8 Mon Sep 17 00:00:00 2001 From: htrgouvea Date: Fri, 22 Sep 2023 10:20:09 -0300 Subject: [PATCH 3/4] create workflow for security-gate --- .github/workflows/security-gate.yml | 35 +++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 .github/workflows/security-gate.yml diff --git a/.github/workflows/security-gate.yml b/.github/workflows/security-gate.yml new file mode 100644 index 0000000..d01f2ab --- /dev/null +++ b/.github/workflows/security-gate.yml @@ -0,0 +1,35 @@ +name: Security Gate - Instriq + +on: + push: + branches: + - main + pull_request: + branches: + - main + +jobs: + build: + runs-on: ubuntu-latest + env: + MAX_CRITICAL: 0 + MAX_HIGH: 0 + MAX_MEDIUM: 0 + MAX_LOW: 0 + GITHUB_TOKEN: ${{ secrets.TOKEN }} + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Pull Docker image from GitHub Container Registry + run: docker pull ghcr.io/instriq/security-gate/security-gate:latest + + - name: Verify security alerts from dependabot + run: | + docker run ghcr.io/instriq/security-gate/security-gate:latest \ + -t $GITHUB_TOKEN \ + -r ${{ github.repository }} \ + --critical $MAX_CRITICAL \ + --high $MAX_HIGH \ + --medium $MAX_MEDIUM \ + --low $MAX_LOW \ No newline at end of file From 8bf495eb136a7eceaf2ff57ea64381e13bf124e1 Mon Sep 17 00:00:00 2001 From: htrgouvea Date: Fri, 22 Sep 2023 10:20:45 -0300 Subject: [PATCH 4/4] added more events to trigger security-gate --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 890f1df..e2531eb 100644 --- a/README.md +++ b/README.md @@ -33,6 +33,9 @@ on: push: branches: - main + pull_request: + branches: + - main jobs: build: