ci.yaml

# SPDX-FileCopyrightText: the secureCodeBox authors
#
# SPDX-License-Identifier: Apache-2.0

name: "CI"
on:
  push:
    branches:
      - main
      - v[0-9]+.x
  pull_request:
  schedule:
    - cron: "15 2 * * *" # Nightly-Build at 2:15 AM UTC

# The CI runs on ubuntu-22.04; More info about the installed software is found here:
# https://github.com/actions/virtual-environments/blob/main/images/linux/Ubuntu2004-Readme.md

env:
  # ---- Language Versions ----

  GO_VERSION: "1.19"
  PYTHON_VERSION: "3.9.16"
  NVM_VERSION: "0.39.3" # Does not need to be updated as often as the Node.js version or the NPM version
  KIND_NODE_IMAGE: "kindest/node:v1.27.3@sha256:9dd3392d79af1b084671b05bcf65b21de476256ad1dcc853d9f3b10b4ac52dde"
  KIND_BINARY_VERSION: "v0.20.0"
  KUBECTL_VERSION: "v1.27.4"
  HELM_VERSION: "v3.12.2"

jobs:
  # ---- NVM Setup ----
  # It is more efficient to do the installation process of nvm only once and upload it as an archive.
  # This can later be imported and extracted quickly in the hooks/scanners testing containers.
  # It also ensures that we pull from an external source to install nvm only once, instead of x number of hooks + y number of scanners
  nvm-setup:
    name: "Configuration"
    runs-on: ubuntu-22.04
    steps:
      - uses: actions/checkout@v3

      - name: Install nvm and Node.js
        run: |
          curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v${{ env.NVM_VERSION }}/install.sh | bash
          export NVM_DIR="$HOME/.nvm"
          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
          nvm install "$(cat .nvmrc)"

      - name: Archive nvm and Node.js
        run: |
          tar czf nvm-node.tar.gz -C $HOME .nvm

      - name: Upload nvm and Node.js
        uses: actions/upload-artifact@v3
        with:
          name: nvm-node
          path: ./nvm-node.tar.gz
          retention-days: 1

  k8s-setup:
    name: "Setup Kind & Kubectl & Helm"
    runs-on: ubuntu-22.04
    steps:
      - uses: actions/checkout@v3

      - name: Install Kind
        run: |
          curl -Lo ./kind https://kind.sigs.k8s.io/dl/${{ env.KIND_BINARY_VERSION }}/kind-linux-amd64
          chmod +x ./kind

      - name: Install Kubectl
        run: |
          curl -Lo ./kubectl curl -LO https://dl.k8s.io/release/${{ env.KUBECTL_VERSION }}/bin/linux/amd64/kubectl
          chmod +x ./kubectl

      - name: Install Helm
        run: |
          curl -Lo ./helm.tar.gz https://get.helm.sh/helm-${{ env.HELM_VERSION }}-linux-amd64.tar.gz
          tar -xzf ./helm.tar.gz
          chmod +x ./linux-amd64/helm

      - name: Archive Kind
        uses: actions/upload-artifact@v3
        with:
          name: kind
          path: ./kind

      - name: Archive Kubectl
        uses: actions/upload-artifact@v3
        with:
          name: kubectl
          path: ./kubectl

      - name: Archive Helm
        uses: actions/upload-artifact@v3
        with:
          name: helm
          path: ./linux-amd64/helm

  # ---- Unit-Test ----

  # ---- Unit-Test | Java ----

  unit-java:
    name: "Unit-Test | Java"
    runs-on: ubuntu-22.04
    strategy:
      matrix:
        unit: ["persistence-defectdojo"]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-java@v1
        with:
          java-version: "17" # The JDK version to make available on the path.
          java-package: jdk # (jre, jdk, or jdk+fx) - defaults to jdk
          architecture: x64 # (x64 or x86) - defaults to x64
      - run: |
          cd hooks/${{ matrix.unit }}/hook/
          ./gradlew test

  # ---- Build Stage ----

  # ---- Build Stage | Operator & Lurker ----

  operator:
    name: "Build | Operator"
    runs-on: ubuntu-22.04
    strategy:
      matrix:
        component: ["operator", "lurker"]
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Go Setup
        uses: actions/setup-go@v2
        with:
          go-version: ${{ env.GO_VERSION }}

      - name: Lint Go Code
        working-directory: ./${{ matrix.component }}
        run: |
          go fmt ./...
          go vet ./...

      - name: Build Container Image
        working-directory: ./operator
        run: make docker-build

      - name: Export Container Image
        working-directory: ./operator
        run: make docker-export-${{ matrix.component }}

      - name: Upload Image As Artifact
        uses: actions/upload-artifact@v3
        with:
          name: ${{ matrix.component }}-image
          path: ./operator/${{ matrix.component }}.tar
          retention-days: 1

  # ---- Build Stage | AutoDiscovery ----

  auto-discovery-kubernetes:
    name: "AutoDiscovery | Kubernetes"
    runs-on: ubuntu-22.04
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Go Setup
        uses: actions/setup-go@v2
        with:
          go-version: ${{ env.GO_VERSION }}

      - name: Lint Go Code
        working-directory: ./auto-discovery/kubernetes
        run: |
          go fmt ./...
          go vet ./...

      - name: Test
        working-directory: ./auto-discovery/kubernetes/
        run: make test

      - name: Build Container Image
        working-directory: ./auto-discovery/kubernetes/
        run: make docker-build

      - name: Export Container Image
        working-directory: ./auto-discovery/kubernetes/
        run: make docker-export

      - name: Upload Image As Artifact
        uses: actions/upload-artifact@v3
        with:
          name: auto-discovery-image
          path: ./auto-discovery/kubernetes/auto-discovery-kubernetes.tar
          retention-days: 1

  # ---- Build Stage | AutoDiscovery | PullSecretExtractor ----
  auto-discovery-kubernetes-secret-extraction-container:
    name: "Autodiscovery | Kubernetes | SecretExtractionInitContainer"
    runs-on: ubuntu-22.04
    needs: 
      - nvm-setup
      - k8s-setup
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Setup Python Version
        uses: actions/setup-python@v4
        with:
          python-version: "${{ env.PYTHON_VERSION }}"

      - name: Download nvm and Node.js
        uses: actions/download-artifact@v3
        with:
          name: nvm-node
          path: nvm-node

      - name: Extract nvm and Node.js
        run: |
          tar xzf nvm-node/nvm-node.tar.gz -C $HOME
          export NVM_DIR="$HOME/.nvm"
          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
          nvm use

      - name: Download Kind
        uses: actions/download-artifact@v3
        with:
          name: kind
          path: ./kind

      - name: Download Kubectl
        uses: actions/download-artifact@v3
        with:
          name: kubectl
          path: ./kubectl

      - name: Download Helm
        uses: actions/download-artifact@v3
        with:
          name: helm
          path: ./helm

      - name: Make binaries globally available
        run: |
          chmod +x ./kind/kind && sudo mv ./kind/kind /usr/local/bin/kind
          chmod +x ./kubectl/kubectl && sudo mv ./kubectl/kubectl /usr/local/bin/kubectl
          chmod +x ./helm/helm && sudo mv ./helm/helm /usr/local/bin/helm

      - name: Verify tools
        run: |
          kind version
          kubectl version || true
          helm version

      - name: Unit Tests
        working-directory: ./auto-discovery/kubernetes/pull-secret-extractor
        run: make unit-test

      - name: Build Container Image
        working-directory: ./auto-discovery/kubernetes/pull-secret-extractor
        run: make docker-build

      - name: Export Container Image
        working-directory: ./auto-discovery/kubernetes/pull-secret-extractor
        run: make docker-export

      - name: Upload Image As Artifact
        uses: actions/upload-artifact@v3
        with:
          name: auto-discovery-pull-secret-extractor
          path: ./auto-discovery/kubernetes/pull-secret-extractor/auto-discovery-secret-extractor.tar
          retention-days: 1

      - name: "Start kind cluster"
        run: |
          kind version
          kind create cluster --wait 3m --image "$KIND_NODE_IMAGE"

      - name: "Inspect kind cluster"
        run: |
          kubectl config current-context
          kubectl get node

      - name: "Run integration tests"
        working-directory: ./auto-discovery/kubernetes/pull-secret-extractor
        run: |
          make integration-test

  # ---- Build Stage | SDK Matrix ----

  sdk:
    name: "Build | SDKs"
    runs-on: ubuntu-22.04
    strategy:
      matrix:
        sdk:
          - parser-sdk
          - hook-sdk
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Build Image
        working-directory: ./${{ matrix.sdk }}/nodejs
        run: make docker-build-sdk

      - name: Export Image
        working-directory: ./${{ matrix.sdk }}/nodejs
        run: make docker-export-sdk

      - name: Upload Artifact
        uses: actions/upload-artifact@v3
        with:
          name: ${{ matrix.sdk }}-image
          path: ./${{ matrix.sdk }}/nodejs/${{ matrix.sdk }}.tar
          retention-days: 1

  # ---- Test | Scanners ----

  test-scanners:
    name: "Test |  Scanner ${{ matrix.unit }}"
    needs:
      - sdk
      - operator
      - nvm-setup
      - k8s-setup
    runs-on: ubuntu-22.04
    strategy:
      fail-fast: false
      matrix:
        unit:
          - amass
          - cmseek
          - doggo
          - ffuf
          - git-repo-scanner
          - gitleaks
          - kubeaudit
          - kube-hunter
          - ncrack
          - nikto
          - nmap
          - nuclei
          - screenshooter
          - semgrep
          - ssh-audit
          - ssh-scan
          - sslyze
          - trivy
          - typo3scan
          - whatweb
          - wpscan
          - zap
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Download nvm and Node.js
        uses: actions/download-artifact@v3
        with:
          name: nvm-node
          path: nvm-node

      - name: Extract nvm and Node.js
        run: |
          tar xzf nvm-node/nvm-node.tar.gz -C $HOME
          export NVM_DIR="$HOME/.nvm"
          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
          nvm use

      - name: Download Kind
        uses: actions/download-artifact@v3
        with:
          name: kind
          path: ./kind

      - name: Download Kubectl
        uses: actions/download-artifact@v3
        with:
          name: kubectl
          path: ./kubectl

      - name: Download Helm
        uses: actions/download-artifact@v3
        with:
          name: helm
          path: ./helm

      - name: Make binaries globally available
        run: |
          chmod +x ./kind/kind && sudo mv ./kind/kind /usr/local/bin/kind
          chmod +x ./kubectl/kubectl && sudo mv ./kubectl/kubectl /usr/local/bin/kubectl
          chmod +x ./helm/helm && sudo mv ./helm/helm /usr/local/bin/helm

      - name: Verify tools
        run: |
          kind version
          kubectl version || true
          helm version

      - name: Install Dependencies
        working-directory: ./scanners/${{ matrix.unit }}/
        run: make install-deps

      - name: Unit Tests
        working-directory: ./scanners/${{ matrix.unit }}/
        run: make unit-tests

      - name: Download Parser SDK Image
        uses: actions/download-artifact@v3
        with:
          name: parser-sdk-image
          path: /tmp

      - name: Load Parser SDK Image
        run: |
          docker load --input /tmp/parser-sdk.tar
          docker images | grep sdk

      - name: Build Images
        working-directory: ./scanners/${{ matrix.unit }}/
        run: make docker-build

      - name: Export Docker Images
        working-directory: ./scanners/${{ matrix.unit }}/
        run: make docker-export

      - name: "Start kind cluster"
        run: |
          kind version
          kind create cluster --wait 3m --image "$KIND_NODE_IMAGE"

      - name: "Inspect kind cluster"
        run: |
          kubectl config current-context
          kubectl get node

      - name: Download Operator Image
        uses: actions/download-artifact@v3
        with:
          name: operator-image
          path: ./operator

      - name: Download Lurker Image
        uses: actions/download-artifact@v3
        with:
          name: lurker-image
          path: ./operator

      - name: Import Operator & Lurker Image to kind cluster
        working-directory: ./operator
        run: make kind-import

      - name: Kind Import ${{ matrix.unit }} Image to kind cluster
        working-directory: ./scanners/${{ matrix.unit }}/
        run: make kind-import

      - name: Deploy Operator Chart to kind cluster
        working-directory: ./operator
        run: |
          make helm-deploy

      - name: Deploy ${{ matrix.unit }} Chart to kind cluster
        working-directory: ./scanners/${{ matrix.unit }}/
        run: make deploy

      - name: Deploy Test Dependencies
        working-directory: ./scanners/${{ matrix.unit }}/
        run: make deploy-test-deps

      - name: Start Integration Tests
        working-directory: ./scanners/${{ matrix.unit }}/
        run: make integration-tests

      # ---- Debuging Cluster on Failure ----

      - name: Inspect Post Failure
        if: failure()
        run: |
          echo "List all 'HelmCharts' in all namespaces"
          helm list --all-namespaces
          echo "List all 'Scans' in all namespaces"
          kubectl get scans -o wide --all-namespaces
          echo "List all 'Jobs' in all namespaces"
          kubectl get jobs -o wide --all-namespaces
          echo "List all 'Pods' in all namespaces"
          kubectl get pods -o wide --all-namespaces
          echo "List all 'Services' in all namespaces"
          kubectl get services -o wide --all-namespaces
          echo "Describe Pods in 'integration-tests' namespace"
          kubectl describe pod -n integration-tests

      - name: "Inspect Operator"
        if: failure()
        run: |
          echo "Deployment in namespace 'securecodebox-system'"
          kubectl -n securecodebox-system get deployments
          echo "Deployment in namespace 'securecodebox-system'"
          kubectl -n securecodebox-system get pods
          echo "Operator Startup Logs"
          kubectl -n securecodebox-system logs deployment/securecodebox-controller-manager

  # ---- Build | Scanners | Custom Scanner | Nightly Build ----

  # This Section contains Scanners that are developed by the secureCodeBox project or require a nightly build
  # The tag for these images will be the Semver of the release

  zap-advanced:
    name: "Zap-advanced integration-test"
    if: ${{ github.event_name == 'schedule' }}
    needs:
      - sdk
      - operator
      - nvm-setup
      - k8s-setup
    runs-on: ubuntu-22.04
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Download nvm and Node.js
        uses: actions/download-artifact@v3
        with:
          name: nvm-node
          path: ./nvm-node

      - name: Extract nvm and Node.js
        run: |
          tar xzf nvm-node/nvm-node.tar.gz -C $HOME
          export NVM_DIR="$HOME/.nvm"
          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
          nvm use

      - name: Download Kind
        uses: actions/download-artifact@v3
        with:
          name: kind
          path: ./kind

      - name: Download Kubectl
        uses: actions/download-artifact@v3
        with:
          name: kubectl
          path: ./kubectl

      - name: Download Helm
        uses: actions/download-artifact@v3
        with:
          name: helm
          path: ./helm

      - name: Make binaries globally available
        run: |
          chmod +x ./kind/kind && sudo mv ./kind/kind /usr/local/bin/kind
          chmod +x ./kubectl/kubectl && sudo mv ./kubectl/kubectl /usr/local/bin/kubectl
          chmod +x ./helm/helm && sudo mv ./helm/helm /usr/local/bin/helm

      - name: Verify tools
        run: |
          kind version
          kubectl version || true
          helm version

      - name: Install Dependencies
        working-directory: ./scanners/zap-advanced/
        run: make install-deps

      - name: Unit Tests
        working-directory: ./scanners/zap-advanced/
        run: make unit-tests

      - name: Download Parser SDK Image
        uses: actions/download-artifact@v3
        with:
          name: parser-sdk-image
          path: /tmp

      - name: Load Parser SDK Image
        run: |
          docker load --input /tmp/parser-sdk.tar
          docker images | grep sdk

      - name: Build Images
        working-directory: ./scanners/zap-advanced/
        run: make docker-build

      - name: Export Docker Images
        working-directory: ./scanners/zap-advanced/
        run: make docker-export

      - name: "Start kind cluster"
        run: |
          kind version
          kind create cluster --wait 3m --image "$KIND_NODE_IMAGE"

      - name: "Inspect kind cluster"
        run: |
          kubectl config current-context
          kubectl get node

      - name: Download Operator Image
        uses: actions/download-artifact@v3
        with:
          name: operator-image
          path: ./operator

      - name: Download Lurker Image
        uses: actions/download-artifact@v3
        with:
          name: lurker-image
          path: ./operator

      - name: Import Operator & Lurker Image
        working-directory: ./operator
        run: make kind-import

      - name: Kind Import Images
        working-directory: ./scanners/zap-advanced/
        run: make kind-import

      - name: Install Operator
        working-directory: ./operator
        run: |
          make helm-deploy

      - name: Deploy zap-advanced
        working-directory: ./scanners/zap-advanced/
        run: make deploy

      - name: Deploy Test Dependencies
        working-directory: ./scanners/zap-advanced/
        run: make deploy-test-deps

      - name: Start Integration Tests
        working-directory: ./scanners/zap-advanced/
        run: make integration-tests

      # ---- Debuging Cluster on Failure ----

      - name: Inspect Post Failure
        if: failure()
        run: |
          echo "List all 'HelmCharts' in all namespaces"
          helm list --all-namespaces
          echo "List all 'Scans' in all namespaces"
          kubectl get scans -o wide --all-namespaces
          echo "List all 'Jobs' in all namespaces"
          kubectl get jobs -o wide --all-namespaces
          echo "List all 'Pods' in all namespaces"
          kubectl get pods -o wide --all-namespaces
          echo "List all 'Services' in all namespaces"
          kubectl get services -o wide --all-namespaces
          echo "Describe Pods in 'integration-tests' namespace"
          kubectl describe pod -n integration-tests

      - name: "Inspect Operator"
        if: failure()
        run: |
          echo "Deployment in namespace 'securecodebox-system'"
          kubectl -n securecodebox-system get deployments
          echo "Deployment in namespace 'securecodebox-system'"
          kubectl -n securecodebox-system get pods
          echo "Operator Startup Logs"
          kubectl -n securecodebox-system logs deployment/securecodebox-controller-manager

      - name: Notify Slack Dev Channel
        if: failure()
        uses: slackapi/slack-github-action@v1.18.0
        with:
          payload: |
            {
              "text": "GitHub Action build result: ${{ job.status }}\n${{ github.event.pull_request.html_url || github.event.head_commit.url }}",
              "blocks": [
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "GitHub Action build result: ${{ job.status }}\n${{ github.event.pull_request.html_url || github.event.head_commit.url }}"
                  }
                }
              ]
            }
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_DEVELOPMENT_CHANNEL }}
          SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK

  # ---- Test | Hooks ----

  test-hooks:
    name: Test |  Hook ${{ matrix.hook }}
    needs:
      - operator
      - nvm-setup
      - k8s-setup
    runs-on: ubuntu-22.04
    strategy:
      matrix:
        hook:
          - cascading-scans
          - generic-webhook
          - persistence-azure-monitor
          # - persistence-elastic # Fails on the CI due to insufficient cpu as mentioned in issue #1165
          - update-field-hook
          - finding-post-processing
          - notification
          # - persistence-static-report (WIP)
    steps:
      - uses: actions/checkout@master
      - name: "Start kind cluster"
        run: |
          kind version
          kind create cluster --wait 3m --image "$KIND_NODE_IMAGE"
      - name: "Inspect kind cluster"
        run: |
          kubectl config current-context
          kubectl get node

      # ---- Install Operator & Create Namespaces ----

      - name: Download Operator Image
        uses: actions/download-artifact@v3
        with:
          name: operator-image
          path: ./operator

      - name: Download Lurker Image
        uses: actions/download-artifact@v3
        with:
          name: lurker-image
          path: ./operator

      - name: Import Operator & Lurker Image
        working-directory: ./operator
        run: make kind-import

      - name: "Install Operator"
        working-directory: ./operator
        run: make helm-deploy

      # ---- Operator Health Check ----

      - name: "Inspect Operator"
        run: |
          echo "Deployment in namespace 'securecodebox-system'"
          kubectl -n securecodebox-system get deployments
          echo "Pods in namespace 'securecodebox-system'"
          kubectl -n securecodebox-system get pods
          echo "Operator Startup Logs"
          kubectl -n securecodebox-system logs deployment/securecodebox-controller-manager

      - name: "Create 'demo-targets' namespace"
        run: "kubectl create namespace demo-targets"

      # ---- Import Parser SDK Artifact

      - name: Download Parser SDK Image
        uses: actions/download-artifact@v3
        with:
          name: parser-sdk-image
          path: /tmp

      - name: Load Parser SDK Image
        run: |
          docker load --input /tmp/parser-sdk.tar
          docker images | grep sdk

      # ---- Import Hook SDK Artifact

      - name: Download Hook SDK Image
        uses: actions/download-artifact@v3
        with:
          name: hook-sdk-image
          path: /tmp

      - name: Load Parser SDK Image
        run: |
          docker load --input /tmp/hook-sdk.tar
          docker images | grep sdk


      # ---- K8s Cluster Setup ---- #

      - name: Download Kind
        uses: actions/download-artifact@v3
        with:
          name: kind
          path: ./kind

      - name: Download Kubectl
        uses: actions/download-artifact@v3
        with:
          name: kubectl
          path: ./kubectl

      - name: Download Helm
        uses: actions/download-artifact@v3
        with:
          name: helm
          path: ./helm

      - name: Make binaries globally available
        run: |
          chmod +x ./kind/kind && sudo mv ./kind/kind /usr/local/bin/kind
          chmod +x ./kubectl/kubectl && sudo mv ./kubectl/kubectl /usr/local/bin/kubectl
          chmod +x ./helm/helm && sudo mv ./helm/helm /usr/local/bin/helm

      - name: Verify tools
        run: |
          kind version
          kubectl version || true
          helm version

      # ----- Build Test-Scan ScanType Image ----

      - name: Build Images
        working-directory: ./scanners/test-scan/
        run: make docker-build

      - name: Export Docker Images
        working-directory: ./scanners/test-scan/
        run: make docker-export

      - name: Kind import
        working-directory: ./scanners/test-scan/
        run: make kind-import

      - name: Test-scan deploy
        working-directory: ./scanners/test-scan/
        run: make deploy

      # ----- Build Hook Image ----

      - name: Build Images
        working-directory: ./hooks/${{ matrix.hook }}
        run: make docker-build

      - name: Export Docker Images
        working-directory: ./hooks/${{ matrix.hook }}
        run: make docker-export

      - name: Kind import
        working-directory: ./hooks/${{ matrix.hook }}
        run: make kind-import

      - name: Download nvm and Node.js
        uses: actions/download-artifact@v3
        with:
          name: nvm-node
          path: ./nvm-node

      - name: Extract nvm and Node.js
        run: |
          tar xzf nvm-node/nvm-node.tar.gz -C $HOME
          export NVM_DIR="$HOME/.nvm"
          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
          nvm use

      - name: "Install Test Dependencies"
        working-directory: ./hooks
        run: npm ci

      # ---- Unit-Test ----

      - name: "Run Unit Tests"
        working-directory: ./hooks/${{ matrix.hook }}
        run: make unit-tests

      # ---- Integration-Test ----

      - name: Deploy ${{ matrix.hook }}
        working-directory: ./hooks/${{ matrix.hook }}
        run: make deploy

      - name: Deploy Test Dependencies
        working-directory: ./hooks/${{ matrix.hook }}
        run: make deploy-test-deps

      - name: "Run Integration Test"
        working-directory: ./hooks/${{ matrix.hook }}
        run: make integration-tests

      # ---- Debuging Cluster on Failure ----

      - name: Inspect Post Failure
        if: failure()
        run: |
          echo "List all 'HelmCharts' in all namespaces"
          helm list --all-namespaces
          echo "List all 'Scans' in all namespaces"
          kubectl get scans -o wide --all-namespaces
          echo "List all 'Jobs' in all namespaces"
          kubectl get jobs -o wide --all-namespaces
          echo "List all 'Pods' in all namespaces"
          kubectl get pods -o wide --all-namespaces
          echo "List all 'Services' in all namespaces"
          kubectl get services -o wide --all-namespaces
          echo "Describe Pods in 'integration-tests' namespace"
          kubectl describe pod -n integration-tests

      - name: "Inspect Operator"
        if: failure()
        run: |
          echo "Deployment in namespace 'securecodebox-system'"
          kubectl -n securecodebox-system get deployments
          echo "Deployment in namespace 'securecodebox-system'"
          kubectl -n securecodebox-system get pods
          echo "Operator Startup Logs"
          kubectl -n securecodebox-system logs deployment/securecodebox-controller-manager

      - name: Test-scan integration-tests
        working-directory: ./scanners/test-scan/
        run: |
          helm -n integration-tests upgrade --install test-scan . \
            --set="scanner.image.repository=docker.io/securecodebox/scanner-test-scan" \
            --set="parser.image.repository=docker.io/securecodebox/parser-test-scan" \
            --set="parser.image.tag=sha-$(git rev-parse --short HEAD)" \
            --set="scanner.image.tag=sha-$(git rev-parse --short HEAD)" \
            --set="parser.env[0].name=CRASH_ON_FAILED_VALIDATION" \
            --set-string="parser.env[0].value=true"  \
            --set="parser.env[1].name=PRODUCE_INVALID_FINDINGS" \
            --set-string="parser.env[1].value=true"
          make integration-tests

      # ---- Clean UP ----

      - name: "Delete kind cluster"
        run: |
          kind delete cluster