This repository is dedicated to providing a starting point for SE demos using CI integration for WizCLI

• Github Account
• Wiz Service Account (security_scan:create)
• Ability to work with branches in Git

• Git installed
• VS Code
• Wiz-CLI
• AWSCLI installed and operational
• Azure CLI installed and operational
• Terraform >= 1.0 installed and operational
• Docker installed and running

1. Create a new repository from the template repository

2. Set repository target and name (customize name to fit your needs)

NOTE: BE SURE TO SELECT YOUR PERSONAL REPO

3. Recreate repository secrets (obtained from Wiz service account security_scan:create)

• WIZ_CLIENT_ID
• WIZ_CLIENT_SECRET

NOTE: If targeting test you may also set the WIZ_ENV here as well.

4. Get coffee

☕️ Template cleanup process takes a few minutes

5. Check for branches

This repo is configured to have the following additonal branches

• container-pass
• container-fail
• iac-pass
• iac-fail

(main branch not shown here)

1. Each branch has a text file in the root of the branch with the same name referred to here as branch-file.txt.

2. To make code PRs easier you can simply modify the text in the branch-file.txt to get a code change to submit.

3. Double click the file to access the editor.

4. Add or change contents of the file and commit changes

5. Navigate back to the repo root and you should see compare & pull request

6. Simply use all of the defaults and select create pull request

7. Repeat for the other branches branches

The github actions located in .github/workflows will provide the required actions during PRs

8. Enable branch protection

9. Configure branch protection for main

NOTE: BE SURE TO SELECT BOTH ACTIONS Wiz-cli Dockerfile and Container Scan and Wiz-cli IaC Scan

10. Go back and view you PRs

This repository is currently under development. If you see a problem please open an issue.

Inventory

Inventory