Skip to content

[updatecli] 8.17 - Update to elastic/beats@9ea9d467d5a5 #4885

[updatecli] 8.17 - Update to elastic/beats@9ea9d467d5a5

[updatecli] 8.17 - Update to elastic/beats@9ea9d467d5a5 #4885

name: Test OPA Policies
on:
pull_request:
push:
branches: [ main ]
jobs:
test-rego-policies:
name: Test Rego Policies
runs-on: ubuntu-latest
defaults:
run:
working-directory: ./security-policies
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Init Hermit
run: ../bin/hermit env -r >> $GITHUB_ENV
- name: OPA format
run: opa fmt ./bundle --fail=true --diff
- name: OPA format list failed files
run: opa fmt ./bundle --list
- name: OPA build
run: opa build -b ./bundle -e ./bundle/compliance
- name: OPA test
run: opa test -b ./bundle -v
- name: OPA check -strict
run: opa check --strict --bundle ./bundle
- name: Lint Rego
run: regal lint --format github bundle