update actions

mitre · Jul 8, 2024 · c1042a4 · c1042a4
1 parent f5f8a5c
commit c1042a4
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 7 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -5,8 +5,8 @@ on:
   workflow_dispatch:
 
 jobs:
-  my_job:
-    name: Harden MongoDB Container
+  harden_validate_mongodb:
+    name: Harden and Validate MongoDB Container
 
     runs-on: ubuntu-latest
 
@@ -17,6 +17,7 @@ jobs:
       CA_FILE_BASE64_AA: ${{ secrets.CA_FILE_BASE64_AA }}
       CA_FILE_BASE64_AB: ${{ secrets.CA_FILE_BASE64_AB }}
       CERTIFICATE_KEY_FILE: ${{ secrets.CERTIFICATE_KEY_FILE }}
+      INSPEC_INPUTS: ${{ secrets.INSPEC_INPUTS }}
 
     steps:
       - name: Add Dependencies
@@ -33,6 +34,7 @@ jobs:
           echo "${{ env.CA_FILE_BASE64_AB }}" >> CA_FILE
           base64 --decode CA_FILE > certificates/dod_CAs.pem
           echo "${{ env.CERTIFICATE_KEY_FILE }}" > certificates/mongodb.pem
+          echo "${{ env.INSPEC_INPUTS }}" > spec/mongo-inspec-profile/inputs.yml
 
       - name: Run Packer Hardening
         run: |

diff --git a/mongo-validate.pkr.hcl b/mongo-validate.pkr.hcl
@@ -41,11 +41,6 @@ source "docker" "hardened" {
   commit      = false
   pull        = false
   discard     = true
-  // run_command = [
-  //   "-d",
-  //   "--name", "${var.input_hardened_image.name}",
-  //   "{{.Image}}",
-  // ]
   run_command = [
     "-d",
     "--name", "${var.input_hardened_image.name}",