actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use codeql upload sarif action

Browse Source
This commit is contained in:
SOOS-JAlvarez
2022-06-10 15:31:19 -03:00
parent d7a0d84297
commit 5f8fa2190b
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code-scanning/soos-dast-scan.yml
+8 -4
View File
@@ -24,18 +24,22 @@ jobs:
soos: soos:
permissions: permissions:
security-events: write # for uploading code scanning alert info security-events: write # for uploading code scanning alert info
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
name: SOOS DAST Scan name: SOOS DAST Scan
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Run SOOS DAST Scan - name: Run SOOS DAST Scan
uses: soos-io/soos-dast-github-action@5f8e2a1994d618e6ac9902e0f491fd1656b698e6 uses: soos-io/soos-dast-github-action@5f8c23ccf8366ea0a58deeb5c804e0524267df43
with: with:
client_id: ${{ secrets.SOOS_CLIENT_ID }} client_id: ${{ secrets.SOOS_CLIENT_ID }}
api_key: ${{ secrets.SOOS_API_KEY }} api_key: ${{ secrets.SOOS_API_KEY }}
project_name: ${{ github.repository }} # If you're going to use SARIF the project name should be on the form of `repoowner/reponame` or use the token github.repository project_name: "<YOUR-PROJECT-NAME>"
scan_mode: "baseline" scan_mode: "baseline"
target_url: "https://www.example.com/" target_url: "https://www.example.com/"
sarif: true # Only set to true if you want to upload the SARIF report to Github output_format: "sarif"
gpat: ${{ secrets.SOOS_GITHUB_PAT }} - name: Upload SOOS DAST SARIF Report
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: results.sarif