Add CIS Level 1 profiles for Ubuntu 26.04 #18448
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Github Pages | |
| on: | |
| push: | |
| branches: ['master'] | |
| pull_request: | |
| branches: ['master', 'oscal-update-*'] | |
| merge_group: | |
| branches: ['master'] | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.number || github.run_id }} | |
| cancel-in-progress: true | |
| jobs: | |
| publish: | |
| name: Publish stats, tables and guides | |
| runs-on: ubuntu-latest | |
| container: | |
| image: fedora:latest | |
| env: | |
| PAGES_DIR: __pages | |
| steps: | |
| - name: Install Deps | |
| run: | | |
| dnf install -y \ | |
| cmake git ninja-build openscap-utils python3-pyyaml \ | |
| python3-jinja2 python3-pytest ansible-lint libxslt \ | |
| python3-pip rsync python3-lxml python3-setuptools | |
| - name: Install deps python | |
| run: pip3 install json2html prometheus_client | |
| - name: Checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Build | |
| run: cmake .. -G Ninja -DCMAKE_BUILD_TYPE=Debug | |
| working-directory: ./build | |
| - name: Build Guides and Mapping Tables | |
| run: ninja -j$(nproc) | |
| working-directory: ./build | |
| - name: Build Statistics | |
| run: ninja html-stats html-profile-stats -j$(nproc) | |
| working-directory: ./build | |
| - name: Render Policies (Using control files) | |
| run: ninja render-policies -j$(nproc) | |
| working-directory: ./build | |
| - name: Generate NIST 800-53 Control Viewer | |
| run: ninja nist-viewer | |
| working-directory: ./build | |
| - name: Generate Prometheus Metrics | |
| run: | | |
| utils/controleval_metrics.py prometheus \ | |
| -p fedora ocp4 rhcos4 rhel10 rhel9 rhel8 sle12 sle15 \ | |
| -f ./build/policies_metrics | |
| env: | |
| PYTHONPATH: ${{ github.workspace }} | |
| - name: Generate HTML pages | |
| run: utils/generate_html_pages.sh $PAGES_DIR | |
| shell: bash | |
| env: | |
| PYTHONPATH: ${{ github.workspace }} | |
| - name: Configure git to trust the workspace despite the different owner | |
| run: | |
| git config --global --add safe.directory "$GITHUB_WORKSPACE" | |
| - name: Deploy | |
| if: >- | |
| ${{ github.event_name == 'push' && | |
| github.repository == 'ComplianceAsCode/content' && | |
| github.ref == 'refs/heads/master' }} | |
| uses: JamesIves/github-pages-deploy-action@fa24774553152dd7873cd16ebd8d959b010c5445 | |
| with: | |
| branch: main # The branch the action should deploy to. | |
| folder: ${{ env.PAGES_DIR }} # The folder the action should deploy. | |
| clean-exclude: srg_mapping/* | |
| repository-name: ComplianceAsCode/content-pages | |
| single-commit: true | |
| token: ${{ secrets.CONTENT_PAGES_TOKEN }} | |
| git-config-name: openscap-ci | |
| git-config-email: openscap-ci@gmail.com | |
| - name: Upload artifact if the event is pull request | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v4 | |
| if: ${{ github.event_name == 'pull_request' }} | |
| with: | |
| name: built-content | |
| path: ${{ env.PAGES_DIR }} |