Shareable Workflows for Solace Organization

Reusable GitHub Actions workflows and actions for Solace repositories providing standardized CI/CD patterns for security scanning, compliance, and configuration management.

Workflows

SCA Scan and Guard

Software Composition Analysis (SCA) scanning for source code dependencies with FOSSA.

Documentation: Complete Usage Guide

Container Scan and Guard

Container image security scanning with FOSSA and optional Prisma Cloud integration.

Documentation: Complete Usage Guide

Actions

SCA Actions

• sca-scan - Generic SCA scan entrypoint with parameter routing
• fossa-scan - FOSSA CLI integration with 48+ configurable parameters
• fossa-guard - Policy and vulnerability enforcement

Container Actions

• container-scan - Multi-scanner orchestrator for container security
• fossa-scan - FOSSA container image analysis
• prisma-scan - Prisma Cloud security scanning
• guardian-container-scan-and-sync - Prisma (and optional Trivy) scan, Guardian upload and sync
• release-readiness-report - One release readiness summary: the verdict, FOSSA licensing per project, and the Guardian report

Utility Actions

• workflow-config-loader - Centralized JSON config file parser
• cicd-helper - Common CI/CD utilities
• pr-size-check - Pull request size validation

Configuration

All workflows support centralized configuration via .github/workflow-config.json files.

Documentation: Workflow Config Schema

Support

• Issues: GitHub Issues
• Documentation: See workflow and action READMEs linked above

License

Copyright © Solace Corporation. All rights reserved.