policy

Mondoo Policy Action

A GitHub Action for publishing Mondoo policies to Mondoo Platform.

Service Account Permissions

Adding policies to Mondoo Platform requires a Mondoo service account with elevated permissions. Use the Space Gateway Agent permissions to add policies to Mondoo Platform.

Properties

The Mondoo Policy Action has properties which are passed to the underlying image. These are passed to the action using with.

Property	Required	Default	Description
args	false		Additional arguments to pass to Mondoo Client.
log-level	false	info	Sets the log level: error, warn, info, debug, trace (default "info")
output	false	compact	Set the output format for scan results: compact, yaml, json, junit, csv, summary, full, report (default "compact")
path	true		Path to the policy file.
service-account-credentials	true		Base64 encoded service account credentials used to authenticate with Mondoo Platform

Add a policy to Mondoo Platform

You can use the Action as follows:

name: Mondoo Policy Add Example
on:
  push:
    paths:
      - "policy/policy.yml"
jobs:
  install:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: mondoohq/actions/policy@main
        with:
          service-account-credentials: ${{ secrets.MONDOO_SERVICE_ACCOUNT }}
          path: policy/policy.yml