From 75e746dc2459f4c8784dc5dce9418c0e818814c2 Mon Sep 17 00:00:00 2001 From: Igor Date: Fri, 17 Apr 2026 11:07:48 +0200 Subject: [PATCH] Add InfraScan audit workflow to GitHub Actions --- .github/workflows/main.yml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 .github/workflows/main.yml diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml new file mode 100644 index 00000000000..d78ffd1a9ba --- /dev/null +++ b/.github/workflows/main.yml @@ -0,0 +1,32 @@ +name: InfraScan Audit + +on: + push: + pull_request: + +jobs: + infrascan: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Create Reports Directory + run: | + mkdir -p infrascan-reports + chmod 777 infrascan-reports + + - name: Run InfraScan + uses: soldevelo/infrascan@v1.0.5 + with: + scanner: comprehensive + format: html + out: infrascan-reports/report.html + + - name: Upload InfraScan Report + uses: actions/upload-artifact@v4 + if: always() # Upload report even if the scan step fails + with: + name: infrascan-report + path: infrascan-reports/report.html + retention-days: 14