chore: check modsecurity.conf-recommended has not changed

Signed-off-by: Felipe Zipitria <[email protected]>
coreruleset · Apr 26, 2024 · a99fdd7 · a99fdd7
1 parent d32ad5f
commit a99fdd7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/verifyimage.yml b/.github/workflows/verifyimage.yml
@@ -8,6 +8,7 @@ on:
 
 env:
   REPO: "owasp/modsecurity-crs"
+  MODSECURITY_RECOMMENDED: "d9e164c508218202eba13d37cf661baacb8600706e618ce93ccc91c74c51449e"
 
 jobs:
   prepare:
@@ -20,6 +21,10 @@ jobs:
       - name: List targets
         id: generate
         uses: docker/bake-action/subaction/list-targets@v4
+      - name: Check modsecurity recommended
+        run: |
+          curl -sSL https://raw.githubusercontent.com/owasp-modsecurity/ModSecurity/v3/master/modsecurity.conf-recommended -o modsecurity.conf-recommended
+          sha256sum -c "${{ env.MODSECURITY_RECOMMENDED }} modsecurity.conf-recommended" modsecurity.conf-recommended
 
   build:
     runs-on: ubuntu-latest