Synopsys Action's starter workflow (#2234)

* Synopsys action starter workflow * Synopsys action - Address review comments * Synopsys action - Address review comments 2 * Addressed review comments * Fixed review comments * Parameter changes accommodation --------- Co-authored-by: kishorikumar <[email protected]> Co-authored-by: Alexis Abril <[email protected]>
2023-12-22 12:11:56 -06:00
parent a0941187cc
commit 4f4ef4e030
3 changed files with 319 additions and 0 deletions
@@ -0,0 +1,7 @@
+{
+    "name": "Synopsys Action",
+    "creator": "Synopsys",
+    "description": "The Synopsys GitHub Action allows you to configure your pipeline to run Synopsys security testing and take action on the security results",
+    "iconName": "synopsys-action",
+    "categories": ["Code Scanning", "C", "C++", "C#", "Go", "Java", "JavaScript", "Ruby", "PHP", "Swift", "Kotlin" , "Python", "VB.NET", "Objective C"]
+}
@@ -0,0 +1,41 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+name: Synopsys Security Testing
+
+on:
+  push:
+    # At this time, it is recommended to run Polaris only on pushes to main branches
+    # Pull request analysis will be supported by Polaris in the future
+    branches: [ $default-branch, $protected-branches ]
+
+  pull_request:
+    branches: [ $default-branch ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Synopsys Action
+        uses: synopsys-sig/[email protected]
+        with:
+          #------------------------------------------COVERITY-----------------------------------------
+          coverity_url: ${{ secrets.COVERITY_URL }}
+          coverity_user: ${{ secrets.COVERITY_USER }}
+          coverity_passphrase: ${{ secrets.COVERITY_PASSPHRASE }}
+
+          #------------------------------------------BLACKDUCK----------------------------------------
+          blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
+          blackduck_url: ${{ secrets.BLACKDUCK_URL }}
+
+          #------------------------------------------POLARIS------------------------------------------
+          polaris_server_url: ${{ secrets.POLARIS_SERVER_URL }}
+          polaris_access_token: ${{ secrets.POLARIS_ACCESS_TOKEN }}
+          polaris_assessment_types: "SCA,SAST"
+
+