emit clean kube-bench JSON report

2026-08-11 19:00:11 -04:00
parent 992f2e2b07
commit 3b1ca2a468
2 changed files with 18 additions and 22 deletions
@@ -74,19 +74,11 @@ jobs:
          kubectl apply -f ci/kube-bench-k3s-job.yaml
          kubectl wait --for=condition=complete job/kube-bench -n kube-bench --timeout=180s
          job_rc=$?
-          kubectl logs -n kube-bench job/kube-bench > artifacts/kube-bench-k3s-cis-1.7.raw || true
-          awk '
-            BEGIN {capture = 0}
-            !capture && index($0, "{") > 0 {
-              sub(/^[^{]*/, "")
-              capture = 1
-            }
-            capture {print}
-          ' artifacts/kube-bench-k3s-cis-1.7.raw > artifacts/kube-bench-k3s-cis-1.7.json
+          kubectl logs -n kube-bench job/kube-bench > artifacts/kube-bench-k3s-cis-1.7.json || true

          if ! jq -e . artifacts/kube-bench-k3s-cis-1.7.json >/dev/null; then
            echo "kube-bench did not produce valid JSON" >&2
-            cat artifacts/kube-bench-k3s-cis-1.7.raw
+            cat artifacts/kube-bench-k3s-cis-1.7.json
            exit 1
          fi