cluster

commit 1e01bb60e1b37b3ddf197018bed88b3d331c7462
parent d33d5c47d46ecbb0ac8edcdcf9bcccc6a41402c2
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sun,  7 Dec 2025 21:36:03 +0100

fix

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
.github/workflows/validate.yaml
 | 
14
++++++++------

1 file changed, 8 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/validate.yaml b/.github/workflows/validate.yaml
@@ -144,29 +144,31 @@ jobs:
 
       - name: Build manifests
         run: |
-          mkdir -p /tmp/manifests
+          mkdir -p manifests
           find . -type f -name 'kustomization.yaml' | while read -r file; do
             dir=$(dirname "$file")
             echo "Building $dir"
-            kustomize build "$dir" --load-restrictor=LoadRestrictionsNone > /tmp/manifests/$(echo "$dir" | tr '/' '_').yaml 2>/dev/null || true
+            kustomize build "$dir" --load-restrictor=LoadRestrictionsNone > manifests/$(echo "$dir" | tr '/' '_').yaml 2>/dev/null || true
           done
+          ls -la manifests/
 
       - name: Run Kubescape
         uses: kubescape/github-action@main
         continue-on-error: true
         with:
-          files: "/tmp/manifests/*.yaml"
+          files: "manifests/"
           frameworks: |
             nsa,mitre
-          failedThreshold: 50
+          complianceThreshold: 50
+          severityThreshold: high
           format: sarif
-          output: kubescape-results.sarif
+          output: results.sarif
 
       - name: Upload Kubescape results to GitHub Security
         uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4
         if: always()
         with:
-          sarif_file: "kubescape-results.sarif"
+          sarif_file: "results.sarif"
 
   lint:
     name: Lint YAML Files