Merge pull request #38 from AikidoSec/feat/fail-scan-when-no-scan-is-enabled

Stop action when no scans are enabled

Author: willem-delbare

.github/workflows/verify-build.yaml

@@ -7,6 +7,9 @@ on:
   push:
     branches:
       - main
+  pull_request:
+    branches:
+      - '*'
 
 jobs:
   check-dist:

README.md

@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Detect new vulnerabilities
-        uses: AikidoSec/[email protected].9
+        uses: AikidoSec/[email protected].10
         with:
             secret-key: ${{ secrets.AIKIDO_SECRET_KEY }}
             fail-on-timeout: true

dist/index.js

@@ -172,6 +172,11 @@ async function run() {
             }
             core.info(`secret key not set.`);
         }
+        if (failOnDependencyScan === 'false' && failOnIacScan === 'false' && failOnSastScan === 'false') {
+            core.setOutput('output', STATUS_FAILED);
+            core.setFailed(`You must enable at least one of the scans.`);
+            return;
+        }
         const scanId = await (0, api_1.startScan)(secretKey, startScanPayload);
         core.info(`successfully started a scan with id: "${scanId}"`);
         const getScanCompletionStatus = (0, api_1.getScanStatus)(secretKey, scanId);

dist/index.js.map

@@ -71,6 +71,12 @@ async function run(): Promise<void> {
 			core.info(`secret key not set.`);
 		}
 
+		if (failOnDependencyScan === 'false' && failOnIacScan === 'false' && failOnSastScan === 'false') {
+			core.setOutput('output', STATUS_FAILED);
+			core.setFailed(`You must enable at least one of the scans.`);
+			return;
+		}
+
 		const scanId = await startScan(secretKey, startScanPayload);
 
 		core.info(`successfully started a scan with id: "${scanId}"`);