mongodb-labs/drivers-github-tools

Scripts for MongoDB drivers to use in GitHub Actions - This Repository is NOT a supported MongoDB product

drivers-github-tools's Issues

Add Static Scanning Action

Add an Action that handle Static Scan results. Notionally it will grab all of the dismissed and open alerts for a ref and produce a new SARIF file based on those. For the dismissed ones, I’d use the dismissed_reason in the JSON response from GitHub. We will place the file in the S3_ASSETS folder to be uploaded to the S3 bucket.

Add compliance report

Add a compliance report that links to other assets and reports created in the release. Put the report in the S3_ASSETS directory to be uploaded to the S3 bucket.

Add SBOM Handling Action

Add an action that download the full SBOM for the current project and puts it in the $RELEASE_ASSETS folder to be uploaded to the GitHub Release. We'll need credentials from the AWS vault and the name of the project as a variable.

Add an automation to bump the v2 tag

We should add a workflow_dispatch action to set main as the new v2 tag, using our GitHub App to push the credentials.