File tree Expand file tree Collapse file tree 1 file changed +18
-20
lines changed
Expand file tree Collapse file tree 1 file changed +18
-20
lines changed Original file line number Diff line number Diff line change 77 branches : [ main ]
88
99jobs :
10- test-devolv-action :
10+ validate-devolv :
11+ name : Devolv - Validate IAM Policies
1112 runs-on : ubuntu-latest
1213
14+ steps :
15+ - name : Checkout test repo
16+ uses : actions/checkout@v3
17+
18+ - name : Run Devolv Validate
19+ uses : devolvdev/devolv-actions@v1
20+ with :
21+ tool : validate
22+ path : ./sample_policies
23+
24+ drift-devolv :
25+ name : Devolv - Detect IAM Policy Drift
26+ runs-on : ubuntu-latest
27+ needs : validate-devolv
28+
1329 steps :
1430 - name : Checkout test repo
1531 uses : actions/checkout@v3
2339 role-to-assume : arn:aws:iam::149704127940:role/DevolvCIRole
2440 role-skip-session-tagging : true
2541
26- - name : Debug AWS identity after AssumeRole
27- run : aws sts get-caller-identity
28-
29- - name : Use Devolv Action - validate
30- uses : devolvdev/devolv-actions@v1
31- with :
32- tool : validate
33- path : ./sample_policies
34-
35- - name : Use Devolv Action - drift
42+ - name : Run Devolv Drift Detection
3643 uses : devolvdev/devolv-actions@v1
3744 with :
3845 tool : drift
3946 policy-name : DevolvTestPolicyHuge
4047 path : ./test-devolv-policy.json
41-
42- - name : Upload Devolv findings
43- if : always()
44- uses : actions/upload-artifact@v4
45- with :
46- name : devolv-findings
47- path : findings.json
48- if-no-files-found : ignore
49-
You can’t perform that action at this time.
0 commit comments