the idea here is to offer open source users the convenience of uploading a sarif result as a step in their github action
Some ideas for this suggested by @thepwagner:
- uses: actions/checkout@v3
- uses: Shopify/kubeaudit@v0.19.0
- uses: Shopify/kubeaudit@v0.20.0 # or a different version
- uses: github/codeql-action/upload-sarif@v2
Depending on the implementation, it can result in compiling the kubeaudit binary each run (and be slow).
Make a Shopify/kubeaudit-action action
This is a common pattern when an action is wrapping a tool with its own release process, that doesn't want to pollute the original tool by Actions-izing it. https://github.com/golangci/golangci-lint-action is a good example.
TypeScript is pretty dope for building actions that do this:
Since TypeScript runs without container overhead, and this pattern downloads pre-compiled binaries I think this would have the fastest runtimes.
FEATURE IDEA
[x] If the maintainers agree with the feature as described here, I intend to submit a Pull Request myself.1
Proposal:
1This is the quickest way to get a new feature! We reserve the right to close feature requests, even ones we like, if the proposer does not intend to contribute to the feature and it doesn't fit in our current roadmap.
ISSUE TYPE
SUMMARY
the idea here is to offer open source users the convenience of uploading a sarif result as a step in their github action Some ideas for this suggested by @thepwagner:
Make
Shopify/kubeaudit
an actionWe add a
action.yml
file to theShopify/kubeaudit
, turning it into either a Docker container action or composite action.This would mean users enable it like:
Depending on the implementation, it can result in compiling the kubeaudit binary each run (and be slow).
Make a
Shopify/kubeaudit-action
actionThis is a common pattern when an action is wrapping a tool with its own release process, that doesn't want to pollute the original tool by Actions-izing it. https://github.com/golangci/golangci-lint-action is a good example.
TypeScript is pretty dope for building actions that do this:
oncall-action
)This would mean users enable like:
Since TypeScript runs without container overhead, and this pattern downloads pre-compiled binaries I think this would have the fastest runtimes.
FEATURE IDEA
Proposal:
1 This is the quickest way to get a new feature! We reserve the right to close feature requests, even ones we like, if the proposer does not intend to contribute to the feature and it doesn't fit in our current roadmap.