pplotka / local-php-security-checker-github-actions Goto Github PK

name: Security scanner

on: [push, pull_request]

jobs:
  security-checker:
    name: Local PHP Security Checker
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Local PHP Security Checker
        id: local_php_security_checker
        continue-on-error: true
        uses: docker://pplotka/local-php-security-checker-github-actions:latest
        with:
          format: markdown

      - name: Security Checker Output
        id: security_output
        run: |
          echo "${{ steps.local_php_security_checker.outputs.security }}"
          echo "${{ steps.local_php_security_checker.outputs.security }}" > security_checker_output.log
          echo "::set-output name=sec_msg::$(cat security_checker_output.log)"

      - name: Check if Vulns exist
        id: vulns_exist
        run: |
          if grep -q "No packages have known vulnerabilities" security_checker_output.log; then
          echo "::set-output name=found_vulns::false"
          else
          echo "::set-output name=found_vulns::true"
          fi

      - name: Slack Notification on Failure
        uses: rtCamp/action-slack-notify@v2
        if: "${{ steps.vulns_exist.outputs.found_vulns == 'true' }}"
        env:
          SLACK_CHANNEL: foobarbaz
          SLACK_COLOR: "${{ job.status == 'success' && 'good' || 'danger' }}"
          SLACK_MESSAGE: ${{ steps.security_output.outputs.sec_msg }}
          SLACK_TITLE: PHP SECURITY ISSUES FOUND
          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
          SLACK_LINK_NAMES: true

name: Security scanner

on: [push, pull_request]

jobs:
  security:
    name: Local PHP Security Checker
    runs-on: ubuntu-latest
    outputs:
     security: ${{ steps.local_php_security_checker.output }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Local PHP Security Checker
        id: local_php_security_checker
        uses: docker://pplotka/local-php-security-checker-github-actions
        with:
          format: markdown
          path: ./composer.lock

  slackNotification:
    name: Slack Notification
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
    - name: Slack Notification
      uses: rtCamp/action-slack-notify@v2
      env:
        SLACK_CHANNEL: FooBarBaz
        SLACK_MESSAGE: ${{ join(steps.local_php_security_checker.outputs.security, '\n') }}
        SLACK_TITLE: BarFoo
        SLACK_USERNAME: Foobar
        SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}