Skip to content

Commit

Permalink
added example NIST SP 800-53 profile and component definition authori…
Browse files Browse the repository at this point in the history
…ng workflow
  • Loading branch information
qduanmu committed Nov 14, 2024
0 parents commit c65647a
Show file tree
Hide file tree
Showing 14 changed files with 216,821 additions and 0 deletions.
49 changes: 49 additions & 0 deletions .github/workflows/trestlebot-create-component-definition.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
---
name: Trestle-bot create component-definition

on:
workflow_dispatch:
inputs:
profile_name:
description: Name of the Trestle profile to use for the component definition
required: true
component_definition_name:
description: Name of the component definition to create
required: true
component_title:
description: Name of the component to create in the generated component definition
required: true
component_type:
description: Type of the component (e.g. service, policy, physical, validation, etc.)
required: false
default: "service"
component_description:
description: Description of the component to create
required: true

jobs:
create-component-definition:
name: Create component definition
runs-on: ubuntu-latest
permissions:
contents: write
pull-requests: write
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Create component definition and open pull request
id: generate-cd
uses: RedHatProductSecurity/trestle-bot/actions/create-cd@main
with:
profile_name: ${{ github.event.inputs.profile_name }}
component_definition_name: ${{ github.event.inputs.component_definition_name}}
component_title: ${{ github.event.inputs.component_title }}
component_type: ${{ github.event.inputs.component_type }}
component_description: ${{ github.event.inputs.component_description }}
markdown_path: "markdown/component-definitions"
branch: "create-component-definition-${{ github.run_id }}"
target_branch: "main"
file_pattern: "*.json,markdown/*,rules/*"
commit_message: "adds component ${{ github.event.inputs.component_title }} in ${{ github.event.inputs.component_definition_name }}"
pull_request_title: "Add component ${{ github.event.inputs.component_title }} to ${{ github.event.inputs.component_definition_name }}"
github_token: ${{ secrets.GITHUB_TOKEN }}
53 changes: 53 additions & 0 deletions .github/workflows/trestlebot-rules-transform.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
---
name: Trestle-bot rules-transform and autosync

on:
push:
branches:
- main
paths:
- 'profiles/**'
- 'catalogs/**'
- 'component-definitions/**'
- 'markdown/**'
- 'rules/**'

concurrency:
group: ${{ github.ref }}-${{ github.workflow }}
cancel-in-progress: true

jobs:
check_rules:
runs-on: ubuntu-latest
outputs:
rules_changed: ${{ steps.changes.outputs.rules }}
steps:
- uses: actions/checkout@v4
- uses: dorny/paths-filter@v3
id: changes
with:
filters: |
rules:
- 'rules/**'
rules-transform-and-autosync:
name: Rules Transform and AutoSync
runs-on: ubuntu-latest
permissions:
contents: write
needs: check_rules
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: AutoSync
id: autosync
uses: RedHatProductSecurity/trestle-bot/actions/autosync@main
with:
markdown_path: "markdown/component-definitions"
oscal_model: "compdef"
commit_message: "Autosync component definition content [skip ci]"
- name: Rules Transform
if: needs.check_rules.outputs.rules_changed == 'true'
uses: RedHatProductSecurity/trestle-bot/actions/rules-transform@main
with:
markdown_path: "markdown/component-definitions"
commit_message: "Auto-transform rules [skip ci]"
Empty file added .trestle/.keep
Empty file.
Empty file added .trestlebot/.keep
Empty file.
Empty file added catalogs/.keep
Empty file.
Loading

0 comments on commit c65647a

Please sign in to comment.