From 131bb6d60f486f9a02c277f90fb66ac3d6cd73b0 Mon Sep 17 00:00:00 2001 From: Tanishq Dubey Date: Thu, 24 Oct 2024 11:26:51 -0400 Subject: [PATCH] add some github actions --- .github/workflows/datadog-sca.yml | 20 ++++++++++++++++++ .github/workflows/datadog-static-analysis.yml | 21 +++++++++++++++++++ 2 files changed, 41 insertions(+) create mode 100644 .github/workflows/datadog-sca.yml create mode 100644 .github/workflows/datadog-static-analysis.yml diff --git a/.github/workflows/datadog-sca.yml b/.github/workflows/datadog-sca.yml new file mode 100644 index 0000000..2c99cb9 --- /dev/null +++ b/.github/workflows/datadog-sca.yml @@ -0,0 +1,20 @@ +on: [push] + +name: Datadog Software Composition Analysis + +jobs: + software-composition-analysis: + runs-on: ubuntu-latest + name: Datadog SBOM Generation and Upload + steps: + - name: Checkout + uses: actions/checkout@v3 + - name: Check imported libraries are secure and compliant + id: datadog-software-composition-analysis + uses: DataDog/datadog-sca-github-action@main + with: + dd_api_key: ${{ secrets.DD_API_KEY }} + dd_app_key: ${{ secrets.DD_APP_KEY }} + dd_service: jarvis + dd_env: ci + dd_site: us5.datadoghq.com diff --git a/.github/workflows/datadog-static-analysis.yml b/.github/workflows/datadog-static-analysis.yml new file mode 100644 index 0000000..f183ff3 --- /dev/null +++ b/.github/workflows/datadog-static-analysis.yml @@ -0,0 +1,21 @@ +on: [push] + +name: Datadog Static Analysis + +jobs: + static-analysis: + runs-on: ubuntu-latest + name: Datadog Static Analyzer + steps: + - name: Checkout + uses: actions/checkout@v3 + - name: Check code meets quality and security standards + id: datadog-static-analysis + uses: DataDog/datadog-static-analyzer-github-action@v1 + with: + dd_api_key: ${{ secrets.DD_API_KEY }} + dd_app_key: ${{ secrets.DD_APP_KEY }} + dd_service: jarvis + dd_env: ci + dd_site: us5.datadoghq.com + cpu_count: 2