AbsaOSS / AbsaOSS/aquasec-scan-results

GH Action minutes consumption during waiting cycle

未關閉
#91 0 則留言 0 個 reaction 已指派 1 人 已被 @tmikula-dev 認領 在 GitHub 檢視
epic
主要語言
Python
星號
0
分支
0
平均合併
1 分鐘
30 天內合併 PR
5

描述

### Background

The Comparison mode in the AquaSec Scan Results repository is triggered on every commit. It is needed to make sure, that new commits do not bring new security alerts. But during busy hours, one triggered scan of developer branch on a bigger project can take up to 2 hours. That is huge waste of GH action minutes. This approach has to change, since it is expected to have this solution on tens of repositories.

### Goals

Find a way how to limit the GH Action minutes in an organization.

### Subtasks

- [x] #87

### Related / References

Options of solution:
- sleep the gh action for some time and revoke for few seconds to check the done state of the scanning flow
- run the solution instead of ubuntu-latest on the EC2s

貢獻指南

開啟貢獻指南

研究方向

Start by reading the repository's GitHub Action workflow that triggers Comparison mode on every commit, plus the completed subtask #87. The issue asks for a way to reduce Action minutes, with possible directions like polling instead of waiting or moving work to EC2. Done means there is an agreed design and implementation that lowers minutes across many repositories.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
aws, github-actions, python
領域
ci-cd, devops, security
Issue 類型
功能
難度
5/5
預估耗時
一週以上
活躍度
冷清
描述清晰度
需要釐清
新手友好度
25/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。