@@ -175,7 +175,7 @@ jobs:
175175 with :
176176 name : snyk.sarif
177177 path : snyk.sarif
178-
178+
179179 - name : Upload Security SARIF (CodeQL)
180180 uses : github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
181181 if : always() && env.SNYK_TOKEN != ''
@@ -226,7 +226,7 @@ jobs:
226226 runs-on : ubuntu-latest
227227 permissions :
228228 contents : read
229- pull-requests : write
229+ pull-requests : write
230230 env :
231231 INFRACOST_API_KEY : ${{ secrets.INFRACOST_API_KEY }}
232232 steps :
@@ -243,7 +243,7 @@ jobs:
243243 if : env.INFRACOST_API_KEY != ''
244244 run : |
245245 infracost breakdown --path ./terraform --format json --out-file infracost-usage.json
246-
246+
247247 - name : Post Infracost Comment
248248 if : github.event_name == 'pull_request' && env.INFRACOST_API_KEY != ''
249249 env :
@@ -300,7 +300,7 @@ jobs:
300300
301301 # 2. Sign (Cosign) - mock step for demo
302302 - name : Sign Image
303- if : github.event_name != 'pull_request'
303+ if : github.event_name != 'pull_request'
304304 env :
305305 COSIGN_PRIVATE_KEY : ${{ secrets.COSIGN_PRIVATE_KEY }}
306306 COSIGN_PASSWORD : ${{ secrets.COSIGN_PASSWORD }}
@@ -337,7 +337,7 @@ jobs:
337337 run : |
338338 docker build -t my-app:${{ github.sha }} .
339339 docker run -d -p 3000:3000 --name test-app my-app:${{ github.sha }}
340- sleep 5
340+ sleep 5
341341
342342 - name : OWASP ZAP Baseline Scan
343343 continue-on-error : true
@@ -502,7 +502,7 @@ jobs:
502502 title : " 🏰 FortressCI Auto-Remediation"
503503 body : |
504504 This is an automated pull request from FortressCI to fix security findings.
505-
505+
506506 Scanners: Snyk, Checkov
507507 branch : fortressci/auto-remediation
508508 base : main
0 commit comments