Add vulnerability scan #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Vulnerability Scan Failure Slack Notify | |
| on: | |
| push: | |
| workflow_dispatch: | |
| inputs: | |
| vulnerability_severity: | |
| description: The severity to fail the workflow if such vulnerability is detected. DO NOT override it unless a Jira ticket is raised. DO NOT use 'CRITICAL' unless a Jira ticket is raised. | |
| type: choice | |
| options: | |
| - CRITICAL,HIGH | |
| - CRITICAL,HIGH,MEDIUM | |
| - CRITICAL | |
| default: 'CRITICAL,HIGH' | |
| schedule: | |
| - cron: '0 16 * * *' # 9:00 AM GMT -7 | |
| - cron: '0 0 * * *' # 5:00 PM GMT -7 | |
| jobs: | |
| vulnerability-scan-failure-notify: | |
| uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-vulnerability-scan-failure-notify.yaml@v3 | |
| secrets: | |
| SLACK_WEBHOOK : ${{ secrets.SLACK_WEBHOOK }} | |
| with: | |
| scan_type : fs |