From c3b63175f258bab348b73360de6ac247a3ba8e82 Mon Sep 17 00:00:00 2001
From: "datreeio[bot]" <40862150+datreeio[bot]@users.noreply.github.com>
Date: Thu, 23 Feb 2023 16:35:41 +0000
Subject: [PATCH] Add datree-validation.yml

---
 .github/workflows/datree-validation.yml | 53 +++++++++++++++++++++++++
 1 file changed, 53 insertions(+)
 create mode 100644 .github/workflows/datree-validation.yml

diff --git a/.github/workflows/datree-validation.yml b/.github/workflows/datree-validation.yml
new file mode 100644
index 0000000..2192f4a
--- /dev/null
+++ b/.github/workflows/datree-validation.yml
@@ -0,0 +1,53 @@
+# |=========================== Datree Policy Check ===================================|
+# | This workflow will verify that all committed config files in the PR are valid.    |
+# | If one of the config files is happened to be a K8s config file (manifest),        |
+# | It will also automatically be tested for schema validation and misconfigurations. |
+# | For more info visit: https://github.com/marketplace/datree                        |
+# |===================================================================================|
+
+name: Datree Workflow
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened]
+
+jobs:
+  configs-validation:
+    runs-on: ubuntu-latest
+    env:
+      DATREE_TOKEN: ${{ secrets.DATREE_TOKEN }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v19
+        with:
+          files: |
+            *.yaml
+            *.yml
+      - name: List all changed files
+        run: echo ${{ steps.changed-files.outputs.all_changed_files }}
+
+      - name: Install Datree's CLI
+        if: steps.changed-files.outputs.any_changed == 'true'
+        run: curl https://get.datree.io | /bin/bash -s
+
+      # |=========================== Datree Policy Check ===================================|
+      # | Prevent Kubernetes misconfigurations from reaching production!                    |
+      # | Datree is a CLI tool to ensure K8s configs follow stability & security            |
+      # | best practices as well as your organization’s policies.                           |
+      # | For more info visit: https://github.com/datreeio/datree                           |
+      # |===================================================================================|
+
+      - name: Datree validate config files
+        if: steps.changed-files.outputs.any_changed == 'true'
+        uses: datreeio/action-datree@main # For more info about this Actions visit 👉 https://github.com/datreeio/action-datree
+        with:
+          path: ${{ steps.changed-files.outputs.all_changed_files }}
+          cliArguments: --only-k8s-files
+          isHelmChart: false
+          isKustomization: false