Validates infrastucture as code against weave policies
- Helm
- Kustomize
USAGE:
app [global options] command [command options] [arguments...]
VERSION:
0.0.1
COMMANDS:
help, h Shows a list of commands or help for one command
GLOBAL OPTIONS:
--path value path to scan resources from
--helm-values-file value path to resources helm values file
--policies-path value path to policies source directory
--policies-helm-values-file value path to policies helm values file
--git-repo-provider value git repository provider [$WEAVE_REPO_PROVIDER]
--git-repo-host value git repository host [$WEAVE_REPO_HOST]
--git-repo-url value git repository url [$WEAVE_REPO_URL]
--git-repo-branch value git repository branch [$WEAVE_REPO_BRANCH]
--git-repo-sha value git repository commit sha [$WEAVE_REPO_SHA]
--git-repo-token value git repository token [$WEAVE_REPO_TOKEN]
--azure-project value azure project name [$AZURE_PROJECT]
--sast value save result as gitlab sast format
--sarif value save result as sarif format
--json value save result as json format
--generate-git-report generate git report if supported (default: false) [$WEAVE_GENERATE_GIT_PROVIDER_REPORT]
--remediate auto remediate resources if possible (default: false)
--no-exit-error exit with no error (default: false)
--help, -h show help (default: false)
--version, -v print the version (default: false)See how to setup the Github Action
weave:
image:
name: weaveworks/weave-policy-validator:v1.4
script:
- weave-validator --path <path to resources> --policies-path <path to policies> script:
- weave-validator --path <path to resources> --policies-path <path to policies> --git-repo-token $GITLAB_TOKEN --remediatestages:
- weave
- sast
weave:
stage: weave
image:
name: weaveworks/weave-policy-validator:v1.4
script:
- weave-validator <path to resources> --policies-path <path to policies> --sast sast.json
artifacts:
when: on_failure
paths:
- sast.json
upload_sast:
stage: sast
when: always
script:
- echo "creating sast report"
artifacts:
reports:
sast: sast.jsonpipelines:
default:
- step:
name: 'Weaveworks'
image: weaveworks/weave-policy-validator:v1.4
script:
- weave-validator --path <path to resources> --policies-path <path to policies> script:
- weave-validator --path <path to resources> --policies-path <path to policies> --git-repo-token $TOKEN --remediate script:
- weave-validator --path <path to resources> --policies-path <path to policies> --git-repo-token $TOKEN -generate-git-reportjobs:
weave:
docker:
- image: weaveworks/weave-policy-validator:v1.4
steps:
- checkout
- run:
command: weave-validator --path <path to resources> --policies-path <path to policies> - run:
command: weave-validator --path <path to resources> --policies-path <path to policies> --git-repo-token ${GITHUB_TOKEN} --remediatetrigger:
- <list of branches to trigger the pipeline on>
pool:
vmImage: ubuntu-latest
container:
image: weaveworks/weave-policy-validator:v1.4-azure
steps:
- script: weave-validator --path <path to resources> --policies-path <path to policies> --git-repo-token $(TOKEN)steps:
- script: weave-validator --path <path to resources> --policies-path <path to policies> --git-repo-token $(TOKEN) --remediateNeed help or want to contribute? Please see the links below.
- Need help?
- Talk to us in the [#weave-policy-validator channel](@todo add channel url) on Weaveworks Community Slack. Invite yourself if you haven't joined yet.
- Have feature proposals or want to contribute?
- Please create a Github issue
- Learn more about contributing here.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent