Merge branch 'main' into users/shaopeng-gh/phpmd
This commit is contained in:
@@ -37,7 +37,7 @@ jobs:
|
|||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
# Runs the Checkmarx Scan leveraging the latest version of CxFlow - REFER to Action README for list of inputs
|
# Runs the Checkmarx Scan leveraging the latest version of CxFlow - REFER to Action README for list of inputs
|
||||||
- name: Checkmarx CxFlow Action
|
- name: Checkmarx CxFlow Action
|
||||||
uses: checkmarx-ts/checkmarx-cxflow-github-action@9975af7d6b957abec9ee9646effa3fb3b82c5314
|
uses: checkmarx-ts/checkmarx-cxflow-github-action@49d8269b14ca87910ba003d47a31fa0c7a11f2fe
|
||||||
with:
|
with:
|
||||||
project: ${{ secrets.CHECKMARX_PROJECT }}
|
project: ${{ secrets.CHECKMARX_PROJECT }}
|
||||||
team: ${{ secrets.CHECKMARX_TEAMS }}
|
team: ${{ secrets.CHECKMARX_TEAMS }}
|
||||||
@@ -46,7 +46,7 @@ jobs:
|
|||||||
checkmarx_password: ${{ secrets.CHECKMARX_PASSWORD }}
|
checkmarx_password: ${{ secrets.CHECKMARX_PASSWORD }}
|
||||||
checkmarx_client_secret: ${{ secrets.CHECKMARX_CLIENT_SECRET }}
|
checkmarx_client_secret: ${{ secrets.CHECKMARX_CLIENT_SECRET }}
|
||||||
scanners: sast
|
scanners: sast
|
||||||
params: --namespace=${{ github.repository_owner }} --repo-name=${{ github.event.repository.name }} --branch=${{ github.ref }} --cx-flow.filterSeverity --cx-flow.filterCategory
|
params: --namespace=${{ github.repository_owner }} --repo-name=${{ github.event.repository.name }} --branch=${{ github.ref }} --cx-flow.filter-severity --cx-flow.filter-category --checkmarx.disable-clubbing=true --repo-url=${{ github.event.repository.url }}
|
||||||
# Upload the Report for CodeQL/Security Alerts
|
# Upload the Report for CodeQL/Security Alerts
|
||||||
- name: Upload SARIF file
|
- name: Upload SARIF file
|
||||||
uses: github/codeql-action/upload-sarif@v2
|
uses: github/codeql-action/upload-sarif@v2
|
||||||
|
|||||||
@@ -46,7 +46,7 @@ jobs:
|
|||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
|
|
||||||
- name: 42Crunch REST API Static Security Testing
|
- name: 42Crunch REST API Static Security Testing
|
||||||
uses: 42Crunch/api-security-audit-action@96228d9c48873fe001354047d47fb62be42abeb1
|
uses: 42Crunch/api-security-audit-action@f3a4f4d44ca6f538fe84361373d7a2a374018fdd
|
||||||
with:
|
with:
|
||||||
# Please create free account at https://platform.42crunch.com/register
|
# Please create free account at https://platform.42crunch.com/register
|
||||||
# Follow these steps to configure API_TOKEN https://docs.42crunch.com/latest/content/tasks/integrate_github_actions.htm
|
# Follow these steps to configure API_TOKEN https://docs.42crunch.com/latest/content/tasks/integrate_github_actions.htm
|
||||||
|
|||||||
Reference in New Issue
Block a user