This action enables you to install Kyverno CLI.
For a quick start guide on the usage of Kyverno CLI, please refer to https://kyverno.io/docs/kyverno-cli/.
This action currently supports GitHub-provided Linux, macOS and Windows runners (self-hosted runners may not work).
Add the following entry to your Github workflow YAML file:
uses: kyverno/[email protected]
with:
release: 'v1.9.5' # optionalExample using a pinned version:
jobs:
example:
runs-on: ubuntu-latest
permissions: {}
name: Install Kyverno CLI
steps:
- name: Install Kyverno CLI
uses: kyverno/[email protected]
with:
release: 'v1.9.5'
- name: Check install
run: kyverno versionExample using the default version:
jobs:
example:
runs-on: ubuntu-latest
permissions: {}
name: Install Kyverno CLI
steps:
- name: Install Kyverno CLI
uses: kyverno/[email protected]
- name: Check install
run: kyverno versionExample using cosign verification:
jobs:
example:
runs-on: ubuntu-latest
permissions: {}
name: Install Kyverno CLI
steps:
- name: Install Cosign
uses: sigstore/[email protected]
- name: Install Kyverno CLI
uses: kyverno/[email protected]
with:
verify: true
- name: Check install
run: kyverno versionIf you want to install Kyverno CLI from its main version by using go install under the hood, you can set release as main.
Once you did that, Kyverno CLI will be installed via go install which means that please ensure that go is installed.
Example of installing Kyverno CLI via go install:
jobs:
example:
runs-on: ubuntu-latest
permissions: {}
name: Install Kyverno CLI via go install
steps:
- name: Install go
uses: actions/setup-go@v4
with:
go-version: '1.20'
check-latest: true
- name: Install Kyverno CLI
uses: kyverno/[email protected]
with:
release: 'main'
- name: Check install
run: kyverno versionThe following optional inputs:
| Input | Description |
|---|---|
release |
kyverno version to use instead of the default. |
install-dir |
directory to place the kyverno binary into instead of the default ($HOME/.kyverno). |
use-sudo |
set to true if install-dir location requires sudo privs. Defaults to false. |
verify |
set to true to enable cosign verification of the downloaded archive. |
Should you discover any security issues, please refer to Kyverno's security process