Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/actionlint.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
paths:
'**/*.yml':
ignore:
# https://github.com/rhysd/actionlint/issues/559
- 'invalid runner name "node24"'
4 changes: 2 additions & 2 deletions .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ jobs:
- name: 'npm build'
run: 'npm ci && npm run build'

- uses: 'google-github-actions/auth@v2' # ratchet:exclude
- uses: 'google-github-actions/auth@v3' # ratchet:exclude
with:
workload_identity_provider: 'projects/251902844862/locations/global/workloadIdentityPools/github/providers/my-repo'
service_account: 'iac-scan-plugins@iac-scan-integration-test.iam.gserviceaccount.com'
Expand Down Expand Up @@ -83,7 +83,7 @@ jobs:
- name: 'npm build'
run: 'npm ci && npm run build'

- uses: 'google-github-actions/auth@v2' # ratchet:exclude
- uses: 'google-github-actions/auth@v3' # ratchet:exclude
with:
workload_identity_provider: 'projects/251902844862/locations/global/workloadIdentityPools/github/providers/my-repo'
service_account: 'iac-scan-plugins@iac-scan-integration-test.iam.gserviceaccount.com'
Expand Down
14 changes: 7 additions & 7 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,8 +21,8 @@ Cloud product, please contact [Google Cloud
support](https://cloud.google.com/support).**

> [!IMPORTANT]
> This action requires the Security Command Center Premium tier or Enterprise
> tier. In the Premium tier, you must be a subscription customer to use this
> This action requires the Security Command Center Premium tier or Enterprise
> tier. In the Premium tier, you must be a subscription customer to use this
> action. You must activate Security Command Center at the organization level to
> use this feature.

Expand All @@ -35,7 +35,7 @@ support](https://cloud.google.com/support).**
* This action requires a Google Cloud service account which has the **Security Posture Shift-Left Validator** role or the **Security Posture Admin** role on the Google Cloud organization that includes the IaC resources. For more information, see [Authorization](#authorization).


* This action runs using Node 20. If you are using self-hosted GitHub Actions
* This action runs using Node 24. If you are using self-hosted GitHub Actions
runners, you must use a [runner
version](https://github.com/actions/virtual-environments) that supports this
version or later.
Expand All @@ -54,13 +54,13 @@ jobs:
steps:
- uses: 'actions/checkout@v4'
- id: 'auth'
uses: 'google-github-actions/auth@v2'
uses: 'google-github-actions/auth@v3'
with:
workload_identity_provider: 'projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider'
service_account: 'my-service-account@my-project.iam.gserviceaccount.com'

- id: 'analyze-code-security-scc'
uses: 'google-github-actions/analyze-code-security-scc@v0'
uses: 'google-github-actions/analyze-code-security-scc@v1'
with:
organization_id: '123456789'
scan_file_ref: './tf_plan.json'
Expand Down Expand Up @@ -174,14 +174,14 @@ jobs:

steps:
- id: 'auth'
uses: 'google-github-actions/auth@v2'
uses: 'google-github-actions/auth@v3'
with:
workload_identity_provider: 'projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider'
service_account: 'my-service-account@my-project.iam.gserviceaccount.com'


- id: 'analyze-code-security-scc'
uses: 'google-github-actions/analyze-code-security-scc@v0'
uses: 'google-github-actions/analyze-code-security-scc@v1'
```


Expand Down
2 changes: 1 addition & 1 deletion action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -110,5 +110,5 @@ outputs:
violations are found in the scan file.

runs:
using: 'node20'
using: 'node24'
main: 'dist/main/index.js'
21 changes: 0 additions & 21 deletions bin/runTests.sh

This file was deleted.

14 changes: 7 additions & 7 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

6 changes: 3 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,10 @@
"docs": "./node_modules/.bin/actions-gen-readme",
"lint": "eslint .",
"format": "eslint . --fix",
"test": "bash ./bin/runTests.sh"
"test": "node --require ts-node/register --test-reporter spec --test tests/**/*.test.ts"
},
"engines": {
"node": ">= 20.x",
"node": ">= 24.x",
"npm": ">= 11.x"
},
"repository": {
Expand All @@ -29,7 +29,7 @@
"dependencies": {
"@actions/core": "^1.11.1",
"@actions/http-client": "^2.2.3",
"@google-github-actions/actions-utils": "^0.8.10",
"@google-github-actions/actions-utils": "^1.0.1",
"google-auth-library": "^10.3.0"
},
"devDependencies": {
Expand Down
Loading