Skip to content

Commit 7bbca90

Browse files
committed
testing both tools in parllel
1 parent 8185a2a commit 7bbca90

File tree

1 file changed

+18
-20
lines changed

1 file changed

+18
-20
lines changed

.github/workflows/test-devolv-action.yml.yml

Lines changed: 18 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,25 @@ on:
77
branches: [ main ]
88

99
jobs:
10-
test-devolv-action:
10+
validate-devolv:
11+
name: Devolv - Validate IAM Policies
1112
runs-on: ubuntu-latest
1213

14+
steps:
15+
- name: Checkout test repo
16+
uses: actions/checkout@v3
17+
18+
- name: Run Devolv Validate
19+
uses: devolvdev/devolv-actions@v1
20+
with:
21+
tool: validate
22+
path: ./sample_policies
23+
24+
drift-devolv:
25+
name: Devolv - Detect IAM Policy Drift
26+
runs-on: ubuntu-latest
27+
needs: validate-devolv
28+
1329
steps:
1430
- name: Checkout test repo
1531
uses: actions/checkout@v3
@@ -23,27 +39,9 @@ jobs:
2339
role-to-assume: arn:aws:iam::149704127940:role/DevolvCIRole
2440
role-skip-session-tagging: true
2541

26-
- name: Debug AWS identity after AssumeRole
27-
run: aws sts get-caller-identity
28-
29-
- name: Use Devolv Action - validate
30-
uses: devolvdev/devolv-actions@v1
31-
with:
32-
tool: validate
33-
path: ./sample_policies
34-
35-
- name: Use Devolv Action - drift
42+
- name: Run Devolv Drift Detection
3643
uses: devolvdev/devolv-actions@v1
3744
with:
3845
tool: drift
3946
policy-name: DevolvTestPolicyHuge
4047
path: ./test-devolv-policy.json
41-
42-
- name: Upload Devolv findings
43-
if: always()
44-
uses: actions/upload-artifact@v4
45-
with:
46-
name: devolv-findings
47-
path: findings.json
48-
if-no-files-found: ignore
49-

0 commit comments

Comments
 (0)