diff --git a/.github/workflows/run_hardening_tests.yaml b/.github/workflows/run_hardening_tests.yaml new file mode 100644 index 0000000..9fcbfd8 --- /dev/null +++ b/.github/workflows/run_hardening_tests.yaml @@ -0,0 +1,53 @@ +name: Run Hardening Tests + +permissions: + contents: read + packages: read + +on: + workflow_dispatch: {} + push: + branches: + - "**" + paths-ignore: + - "docs/**" + - "CODE-OF-CONDUCT.md" + - "CONTRIBUTING.md" + - "LICENSE" + - "README.md" + - "SECURITY.md" + pull_request: + branches: + - "**" + paths-ignore: + - "docs/**" + - "CODE-OF-CONDUCT.md" + - "CONTRIBUTING.md" + - "LICENSE" + - "README.md" + - "SECURITY.md" + +jobs: + Wait-for-images: + runs-on: ubuntu-latest + outputs: + conclusion: ${{ steps.wait.outputs.conclusion }} + steps: + - name: Wait for dev_build.yml to complete + uses: netcracker/qubership-workflow-hub/actions/wait-for-workflow@e64a1ee2fc2f68ab44a4ef416c27d83ce36ba8e1 #v2.2.1 + id: wait + with: + workflow: dev_build.yml + token: ${{ secrets.GITHUB_TOKEN }} + poll-interval: 20 + Consul-Pipeline: + needs: Wait-for-images + uses: Netcracker/qubership-test-pipelines/.github/workflows/consul.yaml@feature/apps-hardening-scan + with: + service_branch: '${{ github.head_ref || github.ref_name }}' + pipeline_branch: 'feature/apps-hardening-scan' + scope: hardening + secrets: + AWS_S3_ACCESS_KEY_ID: ${{secrets.AWS_S3_ACCESS_KEY_ID}} + AWS_S3_ACCESS_KEY_SECRET: ${{secrets.AWS_S3_ACCESS_KEY_SECRET}} +