container-analysis.yaml

#   Copyright 2023 Google LLC
#
#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.

# This is an example on how to fetch occurrences from Container Analysis API
# and create GitHub issues based on them.
#
# You'll need a proper permissions to Container Analysis and a properly scoped
# GitHub access token.

pipeline:
  - type: processor.genericjson
  - type: processor.containeranalysis
    output: analysis
    config:
      name: '{{ data.name }}'
  - type: output.logger
    config:
      message: "Container Analysis results: {{ analysis|json_encode }}"
  - type: processor.github
    output: github
    config:
      githubToken: 'your token'
      repository: 'your-org/your-repo'
      mode: issues.create
      issue:
        title: New vulnerability in {{ (analysis.resourceUri|regex_match('.*/(?P<container>[^/]+)$')).container }}
        body: |
          Type:           {{ analysis.kind }}
          Severity:       {{ analysis.vulnerability.effectiveSeverity }}
          CVSS score:     {{ analysis.vulnerability.cvssScore }}
          Fix available?  {% if analysis.fixAvailable %}Yes!{% else %}No{% endif %}

          Description:
          {{ analysis.vulnerability.shortDescription }}

          {{ analysis.vulnerability.longDescription }}