Bump the artifact group in /.github/workflows with 2 updates #25

	name: CIS-GCP-CI

	on:
	pull_request_target:
	branches:
	- main
	- "[0-9]+.[0-9]+"
	types: [opened, synchronize, reopened]

	jobs:
	Run-CSPM-GCP-Tests:
	name: CIS GCP integration test
	if: false
	runs-on: ubuntu-22.04
	timeout-minutes: 60
	permissions:
	contents: 'read'
	id-token: 'write'
	steps:
	- name: Check out the repo
	uses: actions/checkout@v4

	- name: Init Hermit
	run: ./bin/hermit env -r >> $GITHUB_ENV

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.9'

	- name: Install Poetry
	run: \|
	curl -sSL https://install.python-poetry.org \| python3 -
	poetry --version

	- id: google-auth
	name: Authenticate to Google Cloud
	uses: google-github-actions/auth@v2
	with:
	workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
	service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}

	- name: Build cloudbeat binary
	uses: magefile/mage-action@v3
	with:
	version: latest
	args: build

	- name: Run Elasticsearch
	uses: elastic/elastic-github-actions/elasticsearch@master
	with:
	stack-version: ${{ env.ELK_VERSION }}
	security-enabled: false

	- name: Run cloudbeat in background
	env:
	ES_HOST: http://localhost:9200
	ES_USERNAME: elastic
	ES_PASSWORD: changeme
	GCP_PROJECT_ID: elastic-security-test
	GCP_ACCOUNT_TYPE: single-account
	run: \|
	./cloudbeat -c deploy/gcp/cloudbeat-gcp.yml -d '*' &

	- name: Check for findings
	working-directory: ./tests
	env:
	USE_K8S: false
	run: \|
	poetry install
	poetry run pytest -k "cspm_gcp" --alluredir=./allure/results/ --clean-alluredir --maxfail=4

	- name: Print cloudbeat logs
	if: always()
	run: \|
	cat logs/cloudbeat*

Provide feedback