AbsaOSS / AbsaOSS/aquasec-scan-results

GH Action minutes consumption during waiting cycle

Aberta
#91 0 comentários 0 reações 1 responsável Reivindicada por @tmikula-dev Ver no GitHub
epic
Linguagem predominante
Python
Estrelas
0
Forks
0
Merge médio
1min
PRs com merge (30d)
5

Descrição

### Background

The Comparison mode in the AquaSec Scan Results repository is triggered on every commit. It is needed to make sure, that new commits do not bring new security alerts. But during busy hours, one triggered scan of developer branch on a bigger project can take up to 2 hours. That is huge waste of GH action minutes. This approach has to change, since it is expected to have this solution on tens of repositories.

### Goals

Find a way how to limit the GH Action minutes in an organization.

### Subtasks

- [x] #87

### Related / References

Options of solution:
- sleep the gh action for some time and revoke for few seconds to check the done state of the scanning flow
- run the solution instead of ubuntu-latest on the EC2s

Guia de contribuição

Abrir o guia de contribuição

Direção de pesquisa

Start by reading the repository's GitHub Action workflow that triggers Comparison mode on every commit, plus the completed subtask #87. The issue asks for a way to reduce Action minutes, with possible directions like polling instead of waiting or moving work to EC2. Done means there is an agreed design and implementation that lowers minutes across many repositories.

Escrita pelo modelo de indexação a partir do texto da issue.

Avaliação

Stack de tecnologia
aws, github-actions, python
Domínio
ci-cd, devops, security
Tipo de issue
Funcionalidade
Dificuldade
5/5
Tempo estimado
Mais de uma semana
Status de atividade
Pouca atividade
Clareza
Precisa de esclarecimento
Facilidade para iniciantes
25/100

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.