ci: Replace local RL scanner with reusable action

Author: kailash-b

.github/actions/rl-scanner/action.yml

@@ -22,9 +22,11 @@ jobs:
       RLSECURE_LICENSE: ${{ secrets.RLSECURE_LICENSE }}
       RLSECURE_SITE_KEY: ${{ secrets.RLSECURE_SITE_KEY }}
       SIGNAL_HANDLER_TOKEN: ${{ secrets.SIGNAL_HANDLER_TOKEN }}
+      SIGNAL_HANDLER_DOMAIN: ${{ secrets.SIGNAL_HANDLER_DOMAIN }}
       PRODSEC_TOOLS_USER: ${{ secrets.PRODSEC_TOOLS_USER }}
       PRODSEC_TOOLS_TOKEN: ${{ secrets.PRODSEC_TOOLS_TOKEN }}
       PRODSEC_TOOLS_ARN: ${{ secrets.PRODSEC_TOOLS_ARN }}
+      PRODSEC_PYTHON_TOOLS_REPO: ${{ secrets.PRODSEC_PYTHON_TOOLS_REPO }}
 
   release:
     needs: [rl-scanner-aspnetcore-api]

.github/workflows/release.yml

@@ -17,12 +17,16 @@ on:
         required: true
       SIGNAL_HANDLER_TOKEN:
         required: true
+      SIGNAL_HANDLER_DOMAIN:
+        required: true
       PRODSEC_TOOLS_USER:
         required: true
       PRODSEC_TOOLS_TOKEN:
         required: true
       PRODSEC_TOOLS_ARN:
         required: true
+      PRODSEC_PYTHON_TOOLS_REPO:
+        required: true
 
 jobs:
   rl-scanner:
@@ -63,17 +67,19 @@ jobs:
 
       - name: Run RL Scanner
         id: rl-scan-conclusion
-        uses: ./.github/actions/rl-scanner
+        uses: auth0/devsecops-tooling/.github/actions/rl-scan@main
         with:
+          artifact-name: ${{ inputs.artifact-name }}
           artifact-path: ${{ github.workspace }}/${{ inputs.artifact-name }}
           version: "${{ steps.get_version.outputs.version }}"
-        env:
           RLSECURE_LICENSE: ${{ secrets.RLSECURE_LICENSE }}
           RLSECURE_SITE_KEY: ${{ secrets.RLSECURE_SITE_KEY }}
           SIGNAL_HANDLER_TOKEN: ${{ secrets.SIGNAL_HANDLER_TOKEN }}
+          SIGNAL_HANDLER_DOMAIN: ${{ secrets.SIGNAL_HANDLER_DOMAIN }}
+          PRODSEC_TOOLS_ARN: ${{ secrets.PRODSEC_TOOLS_ARN }}
           PRODSEC_TOOLS_USER: ${{ secrets.PRODSEC_TOOLS_USER }}
           PRODSEC_TOOLS_TOKEN: ${{ secrets.PRODSEC_TOOLS_TOKEN }}
-          PRODSEC_TOOLS_ARN: ${{ secrets.PRODSEC_TOOLS_ARN }}
-        
+          PRODSEC_PYTHON_TOOLS_REPO: ${{ secrets.PRODSEC_PYTHON_TOOLS_REPO }}
+
       - name: Output scan result
         run: echo "scan-status=${{ steps.rl-scan-conclusion.outcome }}" >> $GITHUB_ENV