From fcd3db5626adf80536731a388df3f96e311587bb Mon Sep 17 00:00:00 2001 From: Igor Date: Mon, 29 Jun 2026 12:15:32 +0200 Subject: [PATCH 1/2] Create infrascan.yml --- .github/workflows/infrascan.yml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 .github/workflows/infrascan.yml diff --git a/.github/workflows/infrascan.yml b/.github/workflows/infrascan.yml new file mode 100644 index 00000000..7d9717fa --- /dev/null +++ b/.github/workflows/infrascan.yml @@ -0,0 +1,32 @@ +name: InfraScan Audit + +on: + push: + pull_request: + +jobs: + infrascan: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Create Reports Directory + run: | + mkdir -p infrascan-reports + chmod 777 infrascan-reports + + - name: Run InfraScan + uses: soldevelo/infrascan@v1.0.9 + with: + scanner: comprehensive + format: html + out: infrascan-reports/report.html + + - name: Upload InfraScan Report + uses: actions/upload-artifact@v4 + if: always() # Upload report even if the scan step fails + with: + name: infrascan-report + path: infrascan-reports/report.html + retention-days: 14 From 227fa4a67095f4d0ec09d8f80f4c4901507992f1 Mon Sep 17 00:00:00 2001 From: Igor Date: Tue, 30 Jun 2026 08:42:24 +0200 Subject: [PATCH 2/2] Update and rename infrascan.yml to analysis-tools.yml --- .../{infrascan.yml => analysis-tools.yml} | 25 +++++++++++-------- 1 file changed, 15 insertions(+), 10 deletions(-) rename .github/workflows/{infrascan.yml => analysis-tools.yml} (58%) diff --git a/.github/workflows/infrascan.yml b/.github/workflows/analysis-tools.yml similarity index 58% rename from .github/workflows/infrascan.yml rename to .github/workflows/analysis-tools.yml index 7d9717fa..0cb6800e 100644 --- a/.github/workflows/infrascan.yml +++ b/.github/workflows/analysis-tools.yml @@ -1,20 +1,25 @@ -name: InfraScan Audit +name: Analysis Tools on: - push: - pull_request: + workflow_dispatch: + inputs: + tool: + description: Analysis tool to run + required: true + type: choice + options: + - infrascan jobs: infrascan: + if: ${{ github.event.inputs.tool == 'infrascan' }} runs-on: ubuntu-latest + steps: - - name: Checkout code - uses: actions/checkout@v4 + - uses: actions/checkout@v4 - name: Create Reports Directory - run: | - mkdir -p infrascan-reports - chmod 777 infrascan-reports + run: mkdir -p infrascan-reports - name: Run InfraScan uses: soldevelo/infrascan@v1.0.9 @@ -22,10 +27,10 @@ jobs: scanner: comprehensive format: html out: infrascan-reports/report.html - + - name: Upload InfraScan Report + if: always() uses: actions/upload-artifact@v4 - if: always() # Upload report even if the scan step fails with: name: infrascan-report path: infrascan-reports/report.html