fcli * action
: Add support for pipeline-style actions
#549
Labels
effort:high
Lot of effort needed to implement/fix
fcli-actions
feature
A feature that's on the roadmap or in development
prio:high
High priority; important new feature or bug fix
Current action framework is focused on retrieving, processing and outputting data. Ideally, we should also support pipeline-style actions, for example allowing an action to run the following steps:
fcli sc-sast scan start
command to submit scan requestfcli sc-sast scan wait-for
command to wait for scan completionfcli ssc action run *-sast-report
to export scan resultsfcli ssc action check-policy
to evaluate security policy outcomeWe would have a similar
sast-scan
action in the FoD module, or maybe even a non-product-specific action that automatically selects either FoD or SSC/SC-SAST scan based on input parameters/environment variables, similar to thesast-scan.sh
script in thefortify-ci-tools
image.This would be very beneficial for our CI/CD integrations like GitHub Action and GitLab templates, as we don't need to implement the same steps in every individual integration, but rather just have those integrations invoke these
sast-scan
actions. Also, we could provide an easy option to have users point to a customsast-scan
action that performs extra customer-specific activities, sets some customer-specific defaults (like SSC URL), or uses a customcheck-policy
action.In order to implement this, we'd need to solve various limitations in the current actions framework:
fcli * action
: Session management & non-product-specific actions #547)scancentral package
and potentially other commands (fcli * action
: Add support for running ScanCentral and possibly other commands #548)*-sast-report
andcheck-policy
actions). We'd need to add support for running arbitrary fcli commands without collecting their output, but rather output command output to console (see next point).fcli * action
: Allow actions to disable progress writer #538)Once implemented, this will fix #1
The text was updated successfully, but these errors were encountered: