diff --git a/.github/workflows/azure-analyze.yaml b/.github/workflows/azure-analyze.yaml index 8979350..215f2a2 100644 --- a/.github/workflows/azure-analyze.yaml +++ b/.github/workflows/azure-analyze.yaml @@ -38,6 +38,9 @@ jobs: - name: Checkout uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + # Install a specific version of Bicep for consistency across CI runs. + # - name: Install Bicep + # run: az bicep install --version v0.39.26 # Run analysis by using the PSRule GitHub action. - name: Run PSRule analysis uses: microsoft/ps-rule@46451b8f5258c41beb5ae69ed7190ccbba84112c # v2.9.0 @@ -46,6 +49,9 @@ jobs: outputFormat: Sarif outputPath: reports/ps-rule-results.sarif summary: true + # env: + # # Use Bicep from Azure CLI. + # PSRULE_AZURE_BICEP_USE_AZURE_CLI: true # If you have GitHub Advanced Security you can upload PSRule scan results. # Uncomment the next step to use this feature. diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index b18eec4..857d12d 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -45,6 +45,9 @@ jobs: with: modules: PSRule.Rules.MSFT.OSS + # Install a specific version of Bicep for consistency across CI runs. + # - name: Install Bicep + # run: az bicep install --version v0.39.26 - name: Check Azure samples uses: microsoft/ps-rule@46451b8f5258c41beb5ae69ed7190ccbba84112c # v2.9.0 with: @@ -52,6 +55,9 @@ jobs: outputFormat: Sarif outputPath: reports/ps-rule-results.sarif summary: true + # env: + # # Use Bicep from Azure CLI. + # PSRULE_AZURE_BICEP_USE_AZURE_CLI: true - name: Upload results to security tab uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v3.29.5 diff --git a/ps-rule.lock.json b/ps-rule.lock.json index 682d430..134821f 100644 --- a/ps-rule.lock.json +++ b/ps-rule.lock.json @@ -2,8 +2,8 @@ "version": 1, "modules": { "PSRule.Rules.Azure": { - "version": "1.41.3", - "integrity": "sha512-yvMcfOsu8KWxTxT94ZxiXTYN3wbD4CmsEQpSSjeHGDyJcDKTlSGFW7YC7XW48qEqN0BFi7aTxGfAyM3FAb5vog==" + "version": "1.47.0", + "integrity": "sha512-LaF5k4DxEQHzVfen9W+ocMMUVvI6pFr++zqhsh9Cdxvz+2GBx/OMROOkswNr4D2V2uZ4DCM8Gg2TyLXWtHTKiQ==" } } -} \ No newline at end of file +} diff --git a/ps-rule.yaml b/ps-rule.yaml index a42c99d..818685b 100644 --- a/ps-rule.yaml +++ b/ps-rule.yaml @@ -19,7 +19,6 @@ execution: # Require minimum versions of modules. requires: - PSRule: '@pre >=2.9.0' PSRule.Rules.Azure: '@pre >=1.34.2' # Add PSRule v3 format configuration @@ -71,7 +70,7 @@ configuration: AZURE_BICEP_CHECK_TOOL: true # Configure the minimum version of the Bicep CLI. - AZURE_BICEP_MINIMUM_VERSION: '0.25.53' + AZURE_BICEP_MINIMUM_VERSION: '0.39.26' AZURE_PARAMETER_DEFAULTS: adminPassword: $CREDENTIAL_PLACEHOLDER$