Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions .github/workflows/jit-security.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
name: Workflows generated by the MVS plan
run-name: ${{fromJSON(github.event.inputs.client_payload).payload.job_title}}

on:
workflow_dispatch:
inputs:
client_payload:
description: The Client payload
required: true

permissions:
contents: read
id-token: write

jobs:
jit-ci-job:
runs-on: ubuntu-22.04
timeout-minutes: ${{ fromJSON(github.event.inputs.client_payload).payload.runner_setup.timeout_minutes }}
steps:
- name: ${{ fromJSON( inputs.client_payload ).payload.workflow_job_name }}
uses: jitsecurity-controls/jit-github-action@latest
Empty file added .jit/jit-config.yml
Empty file.
Empty file added .jit/jit-integration.yml
Empty file.
19 changes: 19 additions & 0 deletions .jit/jit-plan.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
author: Jit
items:
- name: Scan your code for vulnerabilities (SAST)
uses: jitsecurity-controls/jit-plans/items/code/item-code-vulnerability.yml@latest
- name: Scan your code dependencies for vulnerabilities (SCA)
uses: jitsecurity-controls/jit-plans/items/code/item-dependency-check.yml@latest
- name: Scan code for hard-coded secrets
uses: jitsecurity-controls/jit-plans/items/code/item-secret-detection.yml@latest
- name: Analyze for Jit Context
uses: jitsecurity-controls/jit-plans/items/jit-context/item-jit-context-analysis.yml@latest
level: beginner
name: My plan
owners:
default: null
references:
- https://www.jit.io
tags: []
version: 0.1

2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM python:3.9-slim
FROM python:3.13.3-slim

WORKDIR /app

Expand Down