From 9618016d00dad5407202a246c5aaa747b9b8644f Mon Sep 17 00:00:00 2001 From: jcamilomolinar Date: Wed, 3 Jun 2026 10:29:58 -0500 Subject: [PATCH] chore: add engine tools task again --- .github/workflows/build.yml | 58 ++++++++++++++++++------------------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 5a3813740..f7dade204 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -67,35 +67,35 @@ jobs: python -m coverage report -m python -m coverage xml - # - name: devsecops-engine-tools - # run: | - # set -e - # # Install devsecops-engine-tools - # pip3 install devsecops-engine-tools -q - - # # Execute devsecops-engine-tools engine_code module - # echo -e "\nRunning devsecops-engine-tools engine_code module..." - # output=$(devsecops-engine-tools --platform_devops github --remote_config_source local --remote_config_repo example_remote_config_local --module engine_code --tool bearer --folder .) - # echo "$output" - # if [[ $output == *"✘Failed"* ]]; then - # exit 0 - # fi - - # # Execute devsecops-engine-tools engine_iac module - # echo -e "\nRunning devsecops-engine-tools engine_iac module..." - # output=$(devsecops-engine-tools --platform_devops github --remote_config_source local --remote_config_repo example_remote_config_local --module engine_iac --tool checkov --folder .) - # echo "$output" - # if [[ $output == *"✘Failed"* ]]; then - # exit 0 - # fi - - # # Execute devsecops-engine-tools engine_secret module - # echo -e "\nRunning devsecops-engine-tools engine_secret module..." - # output=$(devsecops-engine-tools --platform_devops github --remote_config_source local --remote_config_repo example_remote_config_local --module engine_secret --tool trufflehog --folder .) - # echo "$output" - # if [[ $output == *"✘Failed"* ]]; then - # exit 1 - # fi + - name: devsecops-engine-tools + run: | + set -e + # Install devsecops-engine-tools + pip3 install devsecops-engine-tools -q + + # Execute devsecops-engine-tools engine_code module + echo -e "\nRunning devsecops-engine-tools engine_code module..." + output=$(devsecops-engine-tools --platform_devops github --remote_config_source local --remote_config_repo example_remote_config_local --module engine_code --tool bearer --folder .) + echo "$output" + if [[ $output == *"✘Failed"* ]]; then + exit 0 + fi + + # Execute devsecops-engine-tools engine_iac module + echo -e "\nRunning devsecops-engine-tools engine_iac module..." + output=$(devsecops-engine-tools --platform_devops github --remote_config_source local --remote_config_repo example_remote_config_local --module engine_iac --tool checkov --folder .) + echo "$output" + if [[ $output == *"✘Failed"* ]]; then + exit 0 + fi + + # Execute devsecops-engine-tools engine_secret module + echo -e "\nRunning devsecops-engine-tools engine_secret module..." + output=$(devsecops-engine-tools --platform_devops github --remote_config_source local --remote_config_repo example_remote_config_local --module engine_secret --tool trufflehog --folder .) + echo "$output" + if [[ $output == *"✘Failed"* ]]; then + exit 1 + fi - name: Run analysis on SonarQube if: ${{ github.event.pull_request.head.repo.fork == false }}