Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions .github/pvtr-config.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
vars:
token: {{ TOKEN }} # repo, admin:org

policy:
catalogs:
- OSPS_B
applicability:
- Maturity Level 1

write-directory: evaluation_results
services:
privateer:
plugin: github-repo
vars:
owner: privateerproj
repo: privateer
privateer-sdk:
plugin: github-repo
vars:
owner: privateerproj
repo: privateer-sdk

25 changes: 25 additions & 0 deletions .github/workflows/osps-baseline.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
name: OSPS Baseline Scan

on: [workflow_dispatch]

jobs:
scan:
runs-on: ubuntu-latest

steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Pull the pvtr-github-repo image
run: docker pull eddieknight/pvtr-github-repo:latest

- name: Add GitHub Secret to config file so it is protected in outputs
run: |
sed -i 's/{{ TOKEN }}/${{ secrets.TOKEN }}/g' ${{ github.workspace }}/.github/pvtr-config.yml

- name: Scan all repos specified in .github/pvtr-config.yml
run: |
docker run --rm \
-v ${{ github.workspace }}/.github/pvtr-config.yml:/.privateer/config.yml \
-v ${{ github.workspace }}/docker_output:/evaluation_results \
eddieknight/pvtr-github-repo:latest