Method buildCleanFirewallDirsStep

pkg/workflow/threat_detection_steps.go:162–169

buildCleanFirewallDirsStep creates a step that removes stale firewall files from the directories populated by the agent artifact download. When the agent artifact is extracted to /tmp/gh-aw/, it pre-populates the sandbox/firewall/logs and sandbox/firewall/audit directories with files from the agent

()

// squid container in the detection job, squid fails to initialise (exit code 1).
// Cleaning these directories before pulling containers avoids the crash.
func (c *Compiler) buildCleanFirewallDirsStep() []string {
	return []string{
		"      - name: Clean stale firewall files from agent artifact\n",
		"        run: |\n",
		fmt.Sprintf("          rm -rf %s\n", constants.AWFProxyLogsDir),
		fmt.Sprintf("          rm -rf %s\n", constants.AWFAuditDir),
	}
}

// buildPrepareDetectionFilesStep creates a step that copies agent output files
// to the /tmp/gh-aw/threat-detection/ directory expected by the detection JS scripts.