From 47e40aaa96684c0633916b4a3f9ee360449d1ee1 Mon Sep 17 00:00:00 2001 From: sg Date: Tue, 8 Oct 2024 13:01:28 +0100 Subject: [PATCH] github security example workflow --- .../kustomization.yaml | 6 +++--- .../pipelinerun.yaml | 10 ++++++++++ 2 files changed, 13 insertions(+), 3 deletions(-) rename examples/pipelines/{ghas-project => github-security-project}/kustomization.yaml (66%) rename examples/pipelines/{ghas-project => github-security-project}/pipelinerun.yaml (68%) diff --git a/examples/pipelines/ghas-project/kustomization.yaml b/examples/pipelines/github-security-project/kustomization.yaml similarity index 66% rename from examples/pipelines/ghas-project/kustomization.yaml rename to examples/pipelines/github-security-project/kustomization.yaml index 89ce5ab69..8bda9d96b 100644 --- a/examples/pipelines/ghas-project/kustomization.yaml +++ b/examples/pipelines/github-security-project/kustomization.yaml @@ -5,9 +5,9 @@ nameSuffix: -ghas-project components: - pkg:helm/dracon-oss-components/base - pkg:helm/dracon-oss-components/git-clone - - pkg:helm/dracon-oss-components/producer-github-code-scanning + - pkg:helm/dracon-oss-components/producer-github-codeQL + - pkg:helm/dracon-oss-components/producer-github-dependabot - pkg:helm/dracon-oss-components/producer-aggregator - pkg:helm/dracon-oss-components/enricher-codeowners - pkg:helm/dracon-oss-components/enricher-aggregator - - pkg:helm/dracon-oss-components/consumer-mongodb - - pkg:helm/dracon-oss-components/consumer-elasticsearch + - pkg:helm/dracon-oss-components/consumer-stdout-json diff --git a/examples/pipelines/ghas-project/pipelinerun.yaml b/examples/pipelines/github-security-project/pipelinerun.yaml similarity index 68% rename from examples/pipelines/ghas-project/pipelinerun.yaml rename to examples/pipelines/github-security-project/pipelinerun.yaml index e3b6384e9..a2d41314c 100644 --- a/examples/pipelines/ghas-project/pipelinerun.yaml +++ b/examples/pipelines/github-security-project/pipelinerun.yaml @@ -18,6 +18,16 @@ spec: # Note: Must have "Code scanning alerts" repository permissions (read). - name: producer-github-code-scanning-github-token value: github_pat_fake + - name: producer-github-code-scanning-repository-owner + value: ocurity + - name: producer-github-code-scanning-repository-name + value: e2e-monorepo + - name: producer-github-dependabot-repository-owner + value: ocurity + - name: producer-github-dependabot-repository-name + value: e2e-monorepo + - name: producer-github-dependabot-github-token + value: github_pat_fake workspaces: - name: output subPath: source-code