eddiewebb/pipe-cfn-guard
goto: https://bitbucket.org/eddiewebb/pipe-cfn-guard/src/master/
Image
0
611
eddiewebb/pipe-cfn-guard repository overview
Cloud Formation Code Insights for Bitbucket
Uses AWS's cfn-guard to scan and report on Cloud Formation Tempate violations
Variables
| Variable | Usage |
|---|---|
| TEMPLATE (*) | Path to CF Template starting at project root. |
| RULES (*) | Path to CF Guard Ruleset starting at project root. |
| SKIP_FAIL | Don't fail on findings. Default: false (build will fail). |
| DEBUG | Turn on extra debug information. Default: false. |
(*) = required variable.
Examples
Basic example
upload report and fail on finding
- step:
name: TEST
script:
- pipe: docker://eddiewebb/pipe-cfn-guard:0.1.2
variables:
TEMPLATE: Examples/policy.json
RULES: Examples/rules.ruleset
Don't Fail
upload report and skip failure on finding
- step:
name: TEST
script:
- pipe: docker://eddiewebb/pipe-cfn-guard:0.1.2
variables:
TEMPLATE: Examples/policy.json
RULES: Examples/rules.ruleset
SKIP_FAIL: "True"
Testing
build docker and run manually
docker run -it -e TEMPLATE="Examples/policy.json" -e RULES="Examples/rules.ruleset" -e DEBUG="true" -e APP_PASSWORD="LOCALTESTOINGONLY" -e BITBUCKET_COMMIT="a747bcf525721600eab0f2d29a704404e3a9142a" -e BITBUCKET_WORKSPACE="webbinaro" -e BITBUCKET_REPO_SLUG="pipe-cfn-guard" -v $(pwd):/working -w /working pipe/test
Tag summary
Content type
Image
Digest
Size
62.6 MB
Last updated
almost 6 years ago
docker pull eddiewebb/pipe-cfn-guard