diff --git a/sysdig-cli-scan-task/src/InputFetch.ts b/sysdig-cli-scan-task/src/InputFetch.ts index f2eb72f..a60840c 100644 --- a/sysdig-cli-scan-task/src/InputFetch.ts +++ b/sysdig-cli-scan-task/src/InputFetch.ts @@ -64,6 +64,10 @@ export class InputFetch { return this.fetchString('policy', false); } + get detailedPoliciesEval(): boolean { + return tl.getBoolInput('detailedPoliciesEval'); + } + private error(input: string, required: boolean): string { if (required) { tl.setResult(tl.TaskResult.Failed, input.toUpperCase().concat(' fetch failed.')); diff --git a/sysdig-cli-scan-task/src/ScanningEngine.ts b/sysdig-cli-scan-task/src/ScanningEngine.ts index 7b3fbbe..48a7acc 100644 --- a/sysdig-cli-scan-task/src/ScanningEngine.ts +++ b/sysdig-cli-scan-task/src/ScanningEngine.ts @@ -79,6 +79,11 @@ export function buildScanningEngineArg(binaryPath: string): tr.ToolRunner { if (fetch.policy) { scanningEngine.arg(['--policy=' + fetch.policy]); } + + if (fetch.detailedPoliciesEval) { + scanningEngine.arg('--detailed-policies-eval'); + } + // Add image to be scanned scanningEngine.arg(fetch.image); diff --git a/sysdig-cli-scan-task/task.json b/sysdig-cli-scan-task/task.json index bc384a8..f0a9099 100644 --- a/sysdig-cli-scan-task/task.json +++ b/sysdig-cli-scan-task/task.json @@ -132,6 +132,15 @@ "required": false, "helpMarkDown": "Policy to evaluate in the pipeline execution. If not specified, only the Always Apply policy will be evaluated.", "groupName": "overrides" + }, + { + "name": "detailedPoliciesEval", + "type": "boolean", + "label": "Show detailed policies evaluation results", + "defaultValue": false, + "required": false, + "helpMarkDown": "Show detailed per-policy evaluation results in the output.", + "groupName": "overrides" } ], "execution": {