Adding App Inspect CI job #8
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: appinspect | |
| on: | |
| pull_request: | |
| types: [opened, reopened, synchronize] | |
| push: | |
| branches: | |
| - develop | |
| jobs: | |
| appinspect: | |
| #Note that the CircleCI job used a Container. The way to do this with Github Actions | |
| #is to first start up a Virtual Machine, then we can by following: | |
| # https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#jobsjob_idcontainer | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repository code | |
| uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.11' #Available versions here - https://github.com/actions/python-versions/releases easy to change/make a matrix/use pypy | |
| architecture: 'x64' # optional x64 or x86. Defaults to x64 if not specified | |
| - name: Install Python Dependencies and ContentCTL and Atomic Red Team | |
| run: | | |
| pip install contentctl==4.2.2 | |
| git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git | |
| - name: Running build with enrichments | |
| env: | |
| APPINSPECTUSERNAME: "${{ secrets.APPINSPECTUSERNAME }}" | |
| APPINSPECTPASSWORD: "${{ secrets.APPINSPECTPASSWORD }}" | |
| run: | | |
| echo $APPINSPECTUSERNAME | |
| contentctl inspect --splunk-api-username "$APPINSPECTUSERNAME" --splunk-api-password "$APPINSPECTPASSWORD" --stack_type victoria --enrichments | |
| echo "done appinspect" | |
| mkdir -p artifacts/app_inspect_report | |
| cp -r dist/*.html artifacts/app_inspect_report | |
| cp -r dist/*.tar.gz artifacts/ | |
| - name: store_artifacts | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: content-latest | |
| path: | | |
| artifacts/DA-ESS-ContentUpdate-latest.tar.gz | |
| artifacts/app_inspect_report |