Skip to content

update outdated-api policy #60

update outdated-api policy

update outdated-api policy #60

name: update outdated-api policy
on:
workflow_dispatch: {}
schedule:
- cron: "0 0 * * 0" # Sunday midnight
permissions:
contents: write
env:
GO_VERSION: '1.22'
jobs:
outdated:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
with:
token: ${{ secrets.AUTO_COMMIT_TOKEN }}
- uses: actions/setup-go@v5
with:
go-version: ${{ env.GO_VERSION }}
- name: Fetch outdated API data from trivy-db-data repo
id: outdatedapi
uses: fjogeleit/http-request-action@v1
with:
url: "https://raw.githubusercontent.com/aquasecurity/trivy-db-data/main/k8s/api/k8s-outdated-api.json"
method: "GET"
- name: embed outdatedapi-data with in dynamic rego policy
env:
OUTDATE_API_DATA: ${{ toJson(steps.outdatedapi.outputs.response) }}
run: |
make outdated-api-updated
- name: Setup OPA
uses: ./.github/actions/setup-opa
- name: OPA Format
run: |
opa fmt -w . | grep -v vendor || true
- name: commit and push updated outdated-api policy when changes found
uses: stefanzweifel/git-auto-commit-action@v5
with:
commit_message: Update outdated-api policy data
push_options: --force