mirror of
https://github.com/ivabus/pantry
synced 2024-11-25 18:05:07 +03:00
new file: projects/aquasecurity.github.io/tfsec/package.yml
This commit is contained in:
parent
a83da1f83b
commit
9fb78aee49
1 changed files with 38 additions and 0 deletions
38
projects/aquasecurity.github.io/tfsec/package.yml
Normal file
38
projects/aquasecurity.github.io/tfsec/package.yml
Normal file
|
@ -0,0 +1,38 @@
|
|||
distributable:
|
||||
url: git+https://github.com/aquasecurity/tfsec.git
|
||||
ref: ${{version.tag}}
|
||||
|
||||
versions:
|
||||
github: aquasecurity/tfsec
|
||||
|
||||
build:
|
||||
dependencies:
|
||||
go.dev: '>=1.19'
|
||||
script:
|
||||
- scripts/install.sh v{{version}}
|
||||
- mkdir -p {{prefix}}/bin
|
||||
- install tfsec {{prefix}}/bin/
|
||||
|
||||
provides:
|
||||
- bin/tfsec
|
||||
|
||||
test:
|
||||
- mkdir -p good bad
|
||||
- run: |
|
||||
cat <<EOF > good/main.tf
|
||||
resource "aws_alb_listener" "my-alb-listener" {
|
||||
port = "443"
|
||||
protocol = "HTTPS"
|
||||
}
|
||||
EOF
|
||||
- run: |
|
||||
cat <<EOF > bad/main.tf
|
||||
resource "aws_security_group_rule" "world" {
|
||||
description = "A security group triggering tfsec AWS006."
|
||||
type = "ingress"
|
||||
cidr_blocks = ["0.0.0.0/0"]
|
||||
}
|
||||
EOF
|
||||
- tfsec good | grep 'No problems'
|
||||
- tfsec bad || true # tfsec returns 1 on problems detected, it's ok
|
||||
- tfsec --version | grep {{version}}
|
Loading…
Reference in a new issue