type: container
version: 1
name: cybric-source-scan
description: Scan a source artifact with Cybric

inputs:
  artifacts:
      CODE:
        path: /code
  parameters:
    project_name:
    cybric_username:
        default: "%%config.admin@internal.cybric.user%%"

    cybric_password:
        default: "%%config.admin@internal.cybric.password%%"

    policy_id:
      default: "DYNAMIC"
    scan_tool:
    environment:
      default: "production"
    log_level:
      default: "INFO"
outputs:
  artifacts:
    results:
      path: "/results/scan.out"

image: cybricio/integration:latest
resources:
    mem_mib: 512
    cpu_cores: 0.1
command: ["sh", "-c"]

args: [CYBRIC_USER="%%inputs.parameters.cybric_username%%" CYBRIC_PASSWORD="%%inputs.parameters.cybric_password%%"
    LOG_LEVEL="%%inputs.parameters.log_level%%" STAGE="source" POLICY_ID="%%inputs.parameters.policy_id%%"
    CYBRIC_ENVIRONMENT="%%inputs.parameters.environment%%" SCAN_TOOL="%%inputs.parameters.scan_tool%%"
    PROJECT_NAME="%%inputs.parameters.project_name%%" python cybric.py]