GitHub
CI/CD
Pull Request Pipeline
To use the GitHub action, you can copy the code listed below. This will trigger a submit-for-review
action on the Gomboc CLI for every pull request. You can replace the effect
input with preview
if no pull request is wanted. Please note that with preview
, the pipelines will pass, regardless of any remediations we find.
Scheduled Pipeline
The Gomboc pipeline also recognizes scheduled execution to support detecting remediations in code that happen due to changes in IaC modules or improvements in Gomboc remediation coverage. The cron
property follows standard crontab syntax. You can generate a crontab configuration here - https://crontab.guru/. You can choose whether the pipeline should be run always or should only be run when there are new commits since the last execution.
Last updated