Merge pull request #3133 from splunk/new_enrichment_actions_update

Enrichments CI update
See my comment above on why this is being approved even though it appears to be failing

.github/workflows/appinspect.yml

@@ -20,7 +20,8 @@ jobs:
       - name: Install Python Dependencies and ContentCTL and Atomic Red Team
         run: |
           pip install contentctl>=4.0.0
-          git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git
+          git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git external_repos/atomic-red-team
+          git clone --depth=1 --single-branch --branch=master https://github.com/mitre/cti external_repos/cti
       
       - name: Running appinspect with enrichments
         env:

.github/workflows/build.yml

@@ -20,7 +20,8 @@ jobs:
       - name: Install Python Dependencies and ContentCTL and Atomic Red Team
         run: |
           pip install contentctl>=4.0.0
-          git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git
+          git clone --depth=1 --single-branch --branch=master https://github.com/redcanaryco/atomic-red-team.git external_repos/atomic-red-team
+          git clone --depth=1 --single-branch --branch=master https://github.com/mitre/cti external_repos/cti
       
       - name: Running build with enrichments
         run: |

.gitignore

@@ -6,12 +6,13 @@ detections/*/.yml.example
 stories/*.yml.example
 tests/*/*.yml.example
 artifacts/
-contentctl/*
+contentctl/
 dist/DA-ESS-ContentUpdate-*.tar.gz
 dist/DA-ESS-ContentUpdate.tar.gz
 dist/ContentPack-*.appinspect_api_results.html
 dist/ContentPack-*.appinspect_api_results.json
 atomic-red-team/
+external_repos/
 
 # IDE
 .vscode/