install jq for kube-bench report parsing

2026-08-11 19:04:00 -04:00
parent 3b1ca2a468
commit 5ddb0f2fef
1 changed files with 15 additions and 0 deletions
@@ -38,6 +38,21 @@ jobs:
          install -m 0755 "$temp_dir/kubectl" /usr/local/bin/kubectl
          kubectl version --client
      - name: Install jq
        shell: bash
        run: |
          set -euo pipefail
          jq_version=1.8.2
          jq_sha256=b1c22172dd303f3be49e935aa56aa48a8b7a46e0bc838b4997d3bb451495870f
          temp_dir="$(mktemp -d)"
          trap 'rm -rf "$temp_dir"' EXIT
          curl --fail --location --retry 3 \
            --output "$temp_dir/jq" \
            "https://github.com/jqlang/jq/releases/download/jq-${jq_version}/jq-linux-amd64"
          printf '%s  %s\n' "$jq_sha256" "$temp_dir/jq" | sha256sum --check --strict -
          install -m 0755 "$temp_dir/jq" /usr/local/bin/jq
          jq --version
      - name: Create ephemeral K3s cluster
        run: |
          k3d cluster delete security-baseline-ci >/dev/null 2>&1 || true