Skip to content

chore(deps): update github/codeql-action digest to 8960790 #196

chore(deps): update github/codeql-action digest to 8960790

chore(deps): update github/codeql-action digest to 8960790 #196

---
name: Security (Container)
on: # yamllint disable-line rule:truthy
pull_request:
types: [opened, synchronize]
paths:
- .github/workflows/security.container.yml
- Dockerfile
jobs:
# Analyze statically Helm charts to identify any policy violations.
checkov:
name: Checkov
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
with:
python-version: '3.8'
check-latest: true
- uses: bridgecrewio/checkov-action@a6b06158ca30c135b38291f4fa0da67d188ca8f4
with:
framework: dockerfile
skip_check: CKV_DOCKER_2
- uses: github/codeql-action/upload-sarif@d13ca047ae14d02299ae648f2ba451622ecb7270 # tag=codeql-bundle-20221211
if: always()
with:
category: checkov-helm
sarif_file: results.sarif