@@ -11,12 +11,12 @@
|
|||||||
#
|
#
|
||||||
# Instructions:
|
# Instructions:
|
||||||
#
|
#
|
||||||
# 1. In your repository settings, navigate to 'Secrets' and click on 'New repository secret.' Name the
|
# 1. In your repository settings, navigate to 'Secrets' and click on 'New repository secret.' Name the
|
||||||
# secret APPKNOX_ACCESS_TOKEN and paste your appknox user token into the value field. If you don't have a appknox token
|
# secret APPKNOX_ACCESS_TOKEN and paste your appknox user token into the value field. If you don't have a appknox token
|
||||||
# or need to generate a new one for GitHub, visit the Appknox Platform, go to Account Settings->Developer Settings
|
# or need to generate a new one for GitHub, visit the Appknox Platform, go to Account Settings->Developer Settings
|
||||||
# and create a token labeled GitHub
|
# and create a token labeled GitHub
|
||||||
#
|
#
|
||||||
# 2. Refer to the detailed workflow below, make any required adjustments, and then save it to your repository. After the
|
# 2. Refer to the detailed workflow below, make any required adjustments, and then save it to your repository. After the
|
||||||
# action executes, check the 'Security' tab for results
|
# action executes, check the 'Security' tab for results
|
||||||
|
|
||||||
name: Appknox
|
name: Appknox
|
||||||
@@ -25,7 +25,7 @@ on:
|
|||||||
push:
|
push:
|
||||||
branches: [ $default-branch, $protected-branches ]
|
branches: [ $default-branch, $protected-branches ]
|
||||||
pull_request:
|
pull_request:
|
||||||
branches: [ $default-branch ]
|
branches: [ $default-branch ]
|
||||||
jobs:
|
jobs:
|
||||||
appknox:
|
appknox:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
@@ -37,10 +37,10 @@ jobs:
|
|||||||
java-version: 1.8
|
java-version: 1.8
|
||||||
- name: Grant execute permission for gradlew
|
- name: Grant execute permission for gradlew
|
||||||
run: chmod +x gradlew
|
run: chmod +x gradlew
|
||||||
|
|
||||||
- name: Build the app
|
- name: Build the app
|
||||||
run: ./gradlew build # Update this to build your Android or iOS application
|
run: ./gradlew build # Update this to build your Android or iOS application
|
||||||
|
|
||||||
- name: Appknox GitHub action
|
- name: Appknox GitHub action
|
||||||
uses: appknox/appknox-github-action@b7d2bfb2321d5544e97bffcba48557234ab953a4
|
uses: appknox/appknox-github-action@b7d2bfb2321d5544e97bffcba48557234ab953a4
|
||||||
with:
|
with:
|
||||||
@@ -48,7 +48,7 @@ jobs:
|
|||||||
file_path: app/build/outputs/apk/debug/app-debug.apk # Specify the path to your .ipa or .apk here
|
file_path: app/build/outputs/apk/debug/app-debug.apk # Specify the path to your .ipa or .apk here
|
||||||
risk_threshold: MEDIUM # Update this to desired risk threshold [LOW, MEDIUM, HIGH, CRITICAL]
|
risk_threshold: MEDIUM # Update this to desired risk threshold [LOW, MEDIUM, HIGH, CRITICAL]
|
||||||
sarif: Enable
|
sarif: Enable
|
||||||
|
|
||||||
- name: Upload SARIF to GHAS
|
- name: Upload SARIF to GHAS
|
||||||
if: always()
|
if: always()
|
||||||
uses: github/codeql-action/upload-sarif@v3
|
uses: github/codeql-action/upload-sarif@v3
|
||||||
|
|||||||
@@ -33,9 +33,11 @@ jobs:
|
|||||||
- name: Install ESLint
|
- name: Install ESLint
|
||||||
run: |
|
run: |
|
||||||
npm install [email protected]
|
npm install [email protected]
|
||||||
npm install @microsoft/eslint-formatter-sarif@2.1.7
|
npm install @microsoft/eslint-formatter-sarif@3.1.0
|
||||||
|
|
||||||
- name: Run ESLint
|
- name: Run ESLint
|
||||||
|
env:
|
||||||
|
SARIF_ESLINT_IGNORE_SUPPRESSED: "true"
|
||||||
run: npx eslint .
|
run: npx eslint .
|
||||||
--config .eslintrc.js
|
--config .eslintrc.js
|
||||||
--ext .js,.jsx,.ts,.tsx
|
--ext .js,.jsx,.ts,.tsx
|
||||||
@@ -47,4 +49,4 @@ jobs:
|
|||||||
uses: github/codeql-action/upload-sarif@v3
|
uses: github/codeql-action/upload-sarif@v3
|
||||||
with:
|
with:
|
||||||
sarif_file: eslint-results.sarif
|
sarif_file: eslint-results.sarif
|
||||||
wait-for-processing: true
|
wait-for-processing: true
|
||||||
|
|||||||
Reference in New Issue
Block a user