anantacloud-actions/Kyverno Policy Validator
Validate Kubernetes manifests using Kyverno policies with rich GitHub annotations and security reporting.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| policies | Path or OCI URI to policies | yes | — |
| resources | Kubernetes manifests path | yes | — |
| helm-chart | Helm chart path | no | — |
| helm-values | Helm values file | no | — |
| kustomize-path | Kustomize overlay path | no | — |
| policy-exceptions | Path to policy exceptions | no | — |
| severity | Severity filter | no | low,medium,high,critical |
| output-format | — | no | table |
| sarif | — | no | true |
| junit | — | no | true |
| pr-comment | — | no | true |
| diff-mode | — | no | false |
| kyverno-version | — | no | v1.15.0 |
| slack-webhook | Slack webhook URL for notifications | no | — |
| teams-webhook | Microsoft Teams webhook URL for notifications | no | — |
| gchat-webhook | Google Chat webhook URL for notifications | no | — |
| notify-on | When to send notifications: always, failure, success | no | failure |
| github-token | GitHub token for PR comments and API access | no | ${{ github.token }} |
| fail-on-violation | Fail workflow on policy violations | no | true |
| verbose | Enable verbose logging | no | false |
Outputs
| name | description |
|---|---|
| violations | Total violations detected |
| status | Validation status |
| sarif-report | SARIF report location |
| junit-report | JUnit report location |