name: Diggity Action
on: [push, pull_request]
jobs:
  diggity:
    runs-on: ${{matrix.os}}
    strategy:
      matrix:
        os: [ubuntu-latest] # can add more os: windows-latest, macOS-latest
    steps:
      - name: Run carbonetes/diggity # runs the github action of diggity
        uses: carbonetes/[email protected] # runs the github action using this version
        with: # user’s input reference for scanning options, results that diggity-action supported.
          directory: "." # path to directory to be scanned. Default option for scanning.
          output_type: json # desired output format (default table)
          enabled_parsers: apk,go # specified enabled parsers (default all)
          disable_file_listing: true #  disables file listing from package metadata (default false).
          disable_secret_search: true #  disables secret search (default false).
          secret_exclude_filenames: filename_1,filename_2 # exclude secret searching for each specified filenames.
          secret_max_file_size: 10485760 # maximum file size that the secret will search (default 10485760).
          secrets_content_regex: content_regex # secret content regex are searched within files that matches the provided regular expression.
          tar: layer.tar # The path to tar file to be scanned.