t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

ci test for presence of ruleIds im nerged file
CI / Test Setup Trivy amd64 (pull_request) Successful in 5s
Details
CI / Test Setup DB (pull_request) Successful in 14s
Details
CI / Test Get Images From Files (pull_request) Successful in 15s
Details
CI / Test Merge SARIF Files (pull_request) Successful in 25s
Details
CI / Test Setup Trivy arm64 (pull_request) Successful in 28s
Details

Browse Source
This commit is contained in:
Timo Behrendt
2026-02-15 11:47:37 +01:00
parent 3d3c36dc91
commit 785aa30ee8
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yaml
+7
View File
@@ -98,8 +98,15 @@ jobs:
output-file: merged.sarif output-file: merged.sarif
- name: Check merged SARIF file - name: Check merged SARIF file
run: | run: |
# Structure: version, schema, 2 runs
run_count=$(jq '.runs | length' merged.sarif) run_count=$(jq '.runs | length' merged.sarif)
[ "$run_count" -eq 2 ] || { echo "FAIL: expected 2 runs, got $run_count"; exit 1; } [ "$run_count" -eq 2 ] || { echo "FAIL: expected 2 runs, got $run_count"; exit 1; }
echo "Merged SARIF has $run_count runs." echo "Merged SARIF has $run_count runs."
jq -e '.version and .["$schema"] and (.runs | length > 0)' merged.sarif >/dev/null || { echo "FAIL: invalid SARIF structure"; exit 1; } jq -e '.version and .["$schema"] and (.runs | length > 0)' merged.sarif >/dev/null || { echo "FAIL: invalid SARIF structure"; exit 1; }
# Content: results from test_sarif1.json (ruleId KSV-0014) and test_sarif2.json (ruleId CVE-2026-26019) must be present
rule_ids=$(jq -r '[.runs[].results[].ruleId] | unique[]' merged.sarif)
echo "$rule_ids" | grep -q 'KSV-0014' || { echo "FAIL: merged file missing result from test_sarif1.json (ruleId KSV-0014)"; exit 1; }
echo "$rule_ids" | grep -q 'CVE-2026-26019' || { echo "FAIL: merged file missing result from test_sarif2.json (ruleId CVE-2026-26019)"; exit 1; }
echo "Merged results contain ruleIds from both input files."
echo "All checks passed." echo "All checks passed."