Skip to content

ARM template update #40

ARM template update

ARM template update #40

name: "ARM template tests"
on: [workflow_dispatch, pull_request]
jobs:
best-practices-test:
name: "ARM template tests using arm-ttk"
runs-on: "ubuntu-latest"
steps:
- name: Checkout repo
uses: actions/checkout@v4
- name: Rename file
run: |
cp EventHubs/src/azuredeploy_metrics.json EventHubs/src/mainTemplate.json
shopt -s extglob
cd EventHubs/src
rm -- !(mainTemplate.json)
- name: Test Metric ARM Templates using arm-ttk
id: metricfilestest
uses: microsoft/action-armttk@main
with:
workdir: EventHubs/src
fail_on_error: true
level: "info"
- name: Rename file
run: |
rm -rf arm-ttk
cp BlockBlobReader/src/blobreaderdeploy.json BlockBlobReader/src/mainTemplate.json
shopt -s extglob
cd BlockBlobReader/src
rm -- !(mainTemplate.json)
- name: Test BlockBlob ARM Templates using arm-ttk
id: blockblobfilestest
uses: microsoft/action-armttk@main
with:
workdir: BlockBlobReader/src
fail_on_error: true
level: "info"
# - name: Rename file
# run: cp BlockBlobReader/src/blobreaderdeploywithPremiumPlan.json BlockBlobReader/src/mainTemplate.json
# - name: Test BlockBlob Premium Plan ARM Templates using arm-ttk
# id: blockblobpremiumplanfilestest
# uses: aliencube/arm-ttk-actions@main
# with:
# path: BlockBlobReader/src/blobreaderdeploywithPremiumPlan.json
security-test:
name: "ARM template tests using checkov"
runs-on: "ubuntu-latest"
steps:
- name: Checkout repo
uses: actions/checkout@v4
- name: Test Metric ARM Templates using checkov
id: metriccheckov
uses: bridgecrewio/checkov-action@master
with:
file: EventHubs/src/azuredeploy_metrics.json
skip_check: CKV_AZURE_16,CKV_AZURE_17,CKV_AZURE_35
quiet: false
framework: arm
output_format: cli
output_bc_ids: true
- name: Test BlockBlob ARM Templates using checkov
id: blockblobcheckov
uses: bridgecrewio/checkov-action@master
with:
file: BlockBlobReader/src/blobreaderdeploy.json
skip_check: CKV_AZURE_16,CKV_AZURE_17,CKV_AZURE_35
quiet: false
framework: arm
output_format: cli
output_bc_ids: true
log_level: DEBUG
- name: Test BlockBlob Premium Plan Templates using checkov
id: blockblobpremiumplancheckov
uses: bridgecrewio/checkov-action@master
with:
file: BlockBlobReader/src/blobreaderdeploywithPremiumPlan.json
skip_check: CKV_AZURE_16,CKV_AZURE_17,CKV_AZURE_35
quiet: false
framework: arm
output_format: cli
output_bc_ids: true