diff --git a/.github/workflows/jit-security.yml b/.github/workflows/jit-security.yml new file mode 100644 index 0000000..cf52c41 --- /dev/null +++ b/.github/workflows/jit-security.yml @@ -0,0 +1,21 @@ +name: Workflows generated by the MVS plan +run-name: ${{fromJSON(github.event.inputs.client_payload).payload.job_title}} + +on: + workflow_dispatch: + inputs: + client_payload: + description: The Client payload + required: true + +permissions: + contents: read + id-token: write + +jobs: + jit-ci-job: + runs-on: ubuntu-22.04 + timeout-minutes: ${{ fromJSON(github.event.inputs.client_payload).payload.runner_setup.timeout_minutes }} + steps: + - name: ${{ fromJSON( inputs.client_payload ).payload.workflow_job_name }} + uses: jitsecurity-controls/jit-github-action@latest \ No newline at end of file diff --git a/.jit/jit-config.yml b/.jit/jit-config.yml new file mode 100644 index 0000000..e69de29 diff --git a/.jit/jit-integration.yml b/.jit/jit-integration.yml new file mode 100644 index 0000000..e69de29 diff --git a/.jit/jit-plan.yml b/.jit/jit-plan.yml new file mode 100644 index 0000000..3a706a5 --- /dev/null +++ b/.jit/jit-plan.yml @@ -0,0 +1,19 @@ +author: Jit +items: +- name: Scan your code for vulnerabilities (SAST) + uses: jitsecurity-controls/jit-plans/items/code/item-code-vulnerability.yml@latest +- name: Scan your code dependencies for vulnerabilities (SCA) + uses: jitsecurity-controls/jit-plans/items/code/item-dependency-check.yml@latest +- name: Scan code for hard-coded secrets + uses: jitsecurity-controls/jit-plans/items/code/item-secret-detection.yml@latest +- name: Analyze for Jit Context + uses: jitsecurity-controls/jit-plans/items/jit-context/item-jit-context-analysis.yml@latest +level: beginner +name: My plan +owners: + default: null +references: +- https://www.jit.io +tags: [] +version: 0.1 + diff --git a/Dockerfile b/Dockerfile index bad6139..68639f1 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.9-slim +FROM python:3.13.4-slim WORKDIR /app