main.yml

name: "wiz-cli"
on:
  push:
    branches:
    - master
  pull_request:
    branches:
    - master

jobs:
  wiz-scan:
    name: "Wiz-cli Scan"
    runs-on: ubuntu-latest
    env:
      SCAN_PATH: "."
      
    steps:
      - name: Check out repository
        uses: actions/checkout@v2

      - name: Download Wiz CLI
        run: curl -o wizcli https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64 && chmod +x wizcli

      - name: Authenticate to Wiz
        run: ./wizcli auth --id "$WIZ_CLIENT_ID" --secret "$WIZ_CLIENT_SECRET"
        env:
          WIZ_CLIENT_ID: ${{ secrets.WIZ_CLIENT_ID }}
          WIZ_CLIENT_SECRET: ${{ secrets.WIZ_CLIENT_SECRET }}

      - name: Run IaC scan
        run: ./wizcli iac scan --path $SCAN_PATH 

      - name: Run Dir scan
        run: ./wizcli dir scan --path $SCAN_PATH