diff --git a/.github/workflows/DownloadAndRun.yml b/.github/workflows/DownloadAndRun.yml new file mode 100644 index 0000000000..1f26f7a965 --- /dev/null +++ b/.github/workflows/DownloadAndRun.yml @@ -0,0 +1,65 @@ +name: Download And Run +on: + workflow_dispatch: # Allows manual triggering + # no push triggers + # no pull request triggers + # no schedule triggers + repository_dispatch: + types: [Upload] + +jobs: + xygeni-scan: + name: Xygeni Scan + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + with: + fetch-depth: 0 # Shallow clones should be disabled for better relevancy of analysis + + - name: Xygeni-Scanner + uses: xygeni/xygeni-action@v3.2.0 + id: Xygeni-Scanner + with: + xygeni_url: "${{ github.event.client_payload.xy_url }}" + token: "${{ github.event.client_payload.xy_token }}" + gh_token: ${{ secrets.PAT_FOR_XYGENI_SCAN }} + command: scan --help + + - name: Download artifact + id: download-artifact + uses: dawidd6/action-download-artifact@v6 + with: + workflow: xygeni-labdev-tuneado.yml + name: archive-bin + + + - name: Uploading reports .. + run: | + echo Executing Xygeni scan .... + echo ${{ github.event.repository.name }} + declare -i loops="${{ github.event.client_payload.loops }}" + echo LOOPS $loops + + ls -l + + ls -l /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos + ls -l /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/* + for i in $(ls /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/) + do + echo $i + cp /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/$i "/home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/${i}.json" + done + ls -l /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/ + #cat /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/deps.*.json + + for ((i=1; i<=loops; i++)); do + echo Vuelta $i + $HOME/.xygeni/xygeni report-upload -n ${{ github.event.repository.name }}-$i \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/codetamper.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/compliance.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/iac.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/inventory.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/misconf.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/secrets.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/suspectdeps.*.json + done diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml.ok similarity index 100% rename from .github/workflows/codeql-analysis.yml rename to .github/workflows/codeql-analysis.yml.ok diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml.ok similarity index 100% rename from .github/workflows/maven.yml rename to .github/workflows/maven.yml.ok diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml.ok similarity index 95% rename from .github/workflows/snapshot.yml rename to .github/workflows/snapshot.yml.ok index b8a7c82c1d..4902ee2983 100644 --- a/.github/workflows/snapshot.yml +++ b/.github/workflows/snapshot.yml.ok @@ -39,4 +39,4 @@ jobs: env: OSSRH_USERNAME: ${{ secrets.SNAPSHOT_UPLOAD_USER }} OSSRH_TOKEN: ${{ secrets.SNAPSHOT_UPLOAD_PASSWORD }} - GPG_PASSPHRASE: ${{ secrets.GPG_PASSWORD }} \ No newline at end of file + GPG_PASSPHRASE: ${{ secrets.GPG_PASSWORD }} diff --git a/.github/workflows/xygeni-labdev-tuneado.yml b/.github/workflows/xygeni-labdev-tuneado.yml new file mode 100644 index 0000000000..234f9931e4 --- /dev/null +++ b/.github/workflows/xygeni-labdev-tuneado.yml @@ -0,0 +1,40 @@ +name: Xygeni Scan (tuneado) +on: + workflow_dispatch: # Allows manual triggering + # no push triggers + # no pull request triggers + # no schedule triggers + repository_dispatch: + types: [Scan] + +jobs: + xygeni-scan: + name: Xygeni Scan + runs-on: ubuntu-latest + steps: + - name: Set Xygeni env + run: | + echo xy_url "${{ github.event.client_payload.xy_url }}" + + + - uses: actions/checkout@v3 + with: + fetch-depth: 0 # Shallow clones should be disabled for better relevancy of analysis + + + + - name: Xygeni-Scanner + uses: xygeni/xygeni-action@v3.2.0 + id: Xygeni-Scanner + with: + xygeni_url: "${{ github.event.client_payload.xy_url }}" + token: "${{ github.event.client_payload.xy_token }}" + gh_token: ${{ secrets.PAT_FOR_XYGENI_SCAN }} + command: scan --never-fail --include-collaborators --no-upload -f json -o reports/${{ github.repository }} -n ${{ github.repository }} + + - name: Archive building artifacts + uses: actions/upload-artifact@v3 + with: + name: archive-bin + path: | + reports