splunk-security_content/.github/workflows/update_splunk_tas.yml

name: Splunk TA Update Apps

on:
  workflow_dispatch:  # Manually trigger the workflow
  schedule:
    - cron: '55 06 * * *'  # Runs dailyin the morning

jobs:
  modify-code:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
        with:
          ref: 'develop'
      
      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: '3.10'  # or the version your script requires

      - uses: aws-actions/configure-aws-credentials@v6
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: eu-central-1

      - name: Install Python dependencies
        run: |
          pip3 install boto3 PyYAML xmltodict requests urllib3

      - name: Run Python Splunk TA checker
        env:
          SPLUNK_BASE_USERNAME: ${{ secrets.SPLUNK_BASE_USERNAME }}
          SPLUNK_BASE_PASSWORD: ${{ secrets.SPLUNK_BASE_PASSWORD }}
        run: |
          python .github/workflows/ta_update.py