github security example workflow

smithy-security · Oct 8, 2024 · 47e40aa · 47e40aa
1 parent a347d81
commit 47e40aa
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 3 deletions.
diff --git a/...pipelines/ghas-project/kustomization.yaml → ...ithub-security-project/kustomization.yaml b/...pipelines/ghas-project/kustomization.yaml → ...ithub-security-project/kustomization.yaml
@@ -5,9 +5,9 @@ nameSuffix: -ghas-project
 components:
   - pkg:helm/dracon-oss-components/base
   - pkg:helm/dracon-oss-components/git-clone
-  - pkg:helm/dracon-oss-components/producer-github-code-scanning
+  - pkg:helm/dracon-oss-components/producer-github-codeQL
+  - pkg:helm/dracon-oss-components/producer-github-dependabot
   - pkg:helm/dracon-oss-components/producer-aggregator
   - pkg:helm/dracon-oss-components/enricher-codeowners
   - pkg:helm/dracon-oss-components/enricher-aggregator
-  - pkg:helm/dracon-oss-components/consumer-mongodb
-  - pkg:helm/dracon-oss-components/consumer-elasticsearch
+  - pkg:helm/dracon-oss-components/consumer-stdout-json
diff --git a/...s/pipelines/ghas-project/pipelinerun.yaml → .../github-security-project/pipelinerun.yaml b/...s/pipelines/ghas-project/pipelinerun.yaml → .../github-security-project/pipelinerun.yaml
@@ -18,6 +18,16 @@ spec:
   # Note: Must have "Code scanning alerts" repository permissions (read).
   - name: producer-github-code-scanning-github-token
     value: github_pat_fake
+  - name: producer-github-code-scanning-repository-owner
+    value: ocurity
+  - name: producer-github-code-scanning-repository-name
+    value: e2e-monorepo
+  - name: producer-github-dependabot-repository-owner
+    value: ocurity
+  - name: producer-github-dependabot-repository-name
+    value: e2e-monorepo
+  - name: producer-github-dependabot-github-token
+    value: github_pat_fake
   workspaces:
   - name: output
     subPath: source-code