repo-scan.yaml

name: NCTL Scan Pipeline Demo
run-name: ${{ github.actor }} has triggered Scan Action 🚀
on:
  pull_request:
    branches:
      - "main"
  push:
    branches:
      - "main"

env:
  NIRMATA_TOKEN: ${{ secrets.NIRMATA_TOKEN }}
  NIRMATA_URL: ${{ secrets.NIRMATA_URL }}


jobs:
  NCTL-Scan-Repository:
    runs-on: ubuntu-latest
    steps:
      - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event."

      - name: Check out main repository code
        uses: actions/checkout@v4

      - name: Install nctl
        uses: nirmata/action-install-nctl-scan@v0.0.10

      - name: Check nctl version
        run: |
          nctl version

      - name: nctl login
        run: nctl login --url $NIRMATA_URL --userid anusha.hegde@nirmata.com --token $NIRMATA_TOKEN

      - name: NCTL Scan Repository
        run: |
          nctl scan repository --policy-sets pss-baseline,pss-restricted,dockerfile-best-practices  --publish-token $NIRMATA_TOKEN --details
  
      - run: echo "🍏 This job's status is ${{ job.status }}."