From 72d48b26a8ed5e7b0e68c0a828c53aa00df9db58 Mon Sep 17 00:00:00 2001
From: mhart-splunk <77302025+mhart-splunk@users.noreply.github.com>
Date: Thu, 20 Jan 2022 21:18:54 -0500
Subject: [PATCH] Add mlmodel to lookups packaging (#1948)

Adding support for packaging mlmodel lookup files in github actions
---
 .github/workflows/build-and-validate.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/build-and-validate.yml b/.github/workflows/build-and-validate.yml
index 325bd9de6f..33a550c1eb 100644
--- a/.github/workflows/build-and-validate.yml
+++ b/.github/workflows/build-and-validate.yml
@@ -157,6 +157,15 @@ jobs:
           cd lookups
           cp -rv *.csv ../dist/escu/lookups
 
+      - name: Copy lookups .mlmodel files
+        run: |
+          cd lookups
+          count=`ls -1 *.mlmodel 2>/dev/null | wc -l`
+          if [ $count != 0 ]
+          then cp -rv *.mlmodel ../dist/escu/lookups
+          else echo "No mlmodel files to copy"
+          fi
+
       #Tag is '' for non-tagged push and the tag name for a tagged release
       - name: Set tag
         id: vars
@@ -604,6 +613,7 @@ jobs:
           aws s3 cp playbooks s3://security-content/playbooks --recursive --exclude "*" --include "*.yml"
           aws s3 cp lookups s3://security-content/lookups --recursive --exclude "*" --include "*.yml"
           aws s3 cp lookups s3://security-content/lookups --recursive --exclude "*" --include "*.csv"
+          aws s3 cp lookups s3://security-content/lookups --recursive --exclude "*" --include "*.mlmodel"
           aws s3 cp macros s3://security-content/macros --recursive --exclude "*" --include "*.yml"
           aws s3 cp deployments s3://security-content/deployments --recursive --exclude "*" --include "*.yml"
           aws s3 cp dist/api s3://security-content/json --recursive --exclude "*" --include "*.json"