actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'main' into patch-2

Browse Source
This commit is contained in:
Sampark Sharma
2022-04-04 14:52:28 +05:30
committed by GitHub
parent 54f823db6c a6b18b8616
commit cbffb8c46f
36 changed files with 41 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ci/gradle.yml
+3
View File
@@ -13,6 +13,9 @@ on:
pull_request: pull_request:
branches: [ $default-branch ] branches: [ $default-branch ]
permissions:
contents: read
jobs: jobs:
build: build:
code-scanning/anchore.yml
+1 -1
View File
@@ -40,6 +40,6 @@ jobs:
image: "localbuild/testimage:latest" image: "localbuild/testimage:latest"
acs-report-enable: true acs-report-enable: true
- name: Upload Anchore Scan Report - name: Upload Anchore Scan Report
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: results.sarif sarif_file: results.sarif
code-scanning/apisec-scan.yml
+1 -1
View File
@@ -64,6 +64,6 @@ jobs:
# The name of the sarif format result file The file is written only if this property is provided. # The name of the sarif format result file The file is written only if this property is provided.
sarif-result-file: "apisec-results.sarif" sarif-result-file: "apisec-results.sarif"
- name: Import results - name: Import results
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: ./apisec-results.sarif sarif_file: ./apisec-results.sarif
code-scanning/brakeman.yml
+1 -1
View File
@@ -52,6 +52,6 @@ jobs:
# Upload the SARIF file generated in the previous step # Upload the SARIF file generated in the previous step
- name: Upload SARIF - name: Upload SARIF
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: output.sarif.json sarif_file: output.sarif.json
code-scanning/checkmarx.yml
+1 -1
View File
@@ -49,6 +49,6 @@ jobs:
params: --namespace=${{ github.repository_owner }} --repo-name=${{ github.event.repository.name }} --branch=${{ github.ref }} --cx-flow.filterSeverity --cx-flow.filterCategory params: --namespace=${{ github.repository_owner }} --repo-name=${{ github.event.repository.name }} --branch=${{ github.ref }} --cx-flow.filterSeverity --cx-flow.filterCategory
# Upload the Report for CodeQL/Security Alerts # Upload the Report for CodeQL/Security Alerts
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: cx.sarif sarif_file: cx.sarif
code-scanning/cloudrail.yml
+1 -1
View File
@@ -50,7 +50,7 @@ jobs:
cloud-account-id: # Leave this empty for Static Analaysis, or provide an account ID for Dynamic Analysis, see instructions in Cloudrail SaaS cloud-account-id: # Leave this empty for Static Analaysis, or provide an account ID for Dynamic Analysis, see instructions in Cloudrail SaaS
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
# Remember that if issues are found, Cloudrail return non-zero exit code, so the if: always() # Remember that if issues are found, Cloudrail return non-zero exit code, so the if: always()
# is needed to ensure the SARIF file is uploaded # is needed to ensure the SARIF file is uploaded
if: always() if: always()
code-scanning/codacy.yml
+1 -1
View File
@@ -55,6 +55,6 @@ jobs:
# Upload the SARIF file generated in the previous step # Upload the SARIF file generated in the previous step
- name: Upload SARIF results file - name: Upload SARIF results file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: results.sarif sarif_file: results.sarif
code-scanning/codeql.yml
+3 -3
View File
@@ -42,7 +42,7 @@ jobs:
# Initializes the CodeQL tools for scanning. # Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@v1 uses: github/codeql-action/init@v2
with: with:
languages: ${{ matrix.language }} languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file. # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below) # If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild - name: Autobuild
uses: github/codeql-action/autobuild@v1 uses: github/codeql-action/autobuild@v2
# ℹ️ Command-line programs to run using the OS shell. # ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl # 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
# make release # make release
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v1 uses: github/codeql-action/analyze@v2
code-scanning/codescan.yml
+1 -1
View File
@@ -37,6 +37,6 @@ jobs:
organization: ${{ secrets.CODESCAN_ORGANIZATION_KEY }} organization: ${{ secrets.CODESCAN_ORGANIZATION_KEY }}
projectKey: ${{ secrets.CODESCAN_PROJECT_KEY }} projectKey: ${{ secrets.CODESCAN_PROJECT_KEY }}
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: codescan.sarif sarif_file: codescan.sarif
code-scanning/detekt.yml
+1 -1
View File
@@ -111,7 +111,7 @@ jobs:
)" > ${{ github.workspace }}/detekt.sarif.json )" > ${{ github.workspace }}/detekt.sarif.json
# Uploads results to GitHub repository using the upload-sarif action # Uploads results to GitHub repository using the upload-sarif action
- uses: github/codeql-action/upload-sarif@v1 - uses: github/codeql-action/upload-sarif@v2
with: with:
# Path to SARIF file relative to the root of the repository # Path to SARIF file relative to the root of the repository
sarif_file: ${{ github.workspace }}/detekt.sarif.json sarif_file: ${{ github.workspace }}/detekt.sarif.json
code-scanning/devskim.yml
+1 -1
View File
@@ -29,6 +29,6 @@ jobs:
uses: microsoft/DevSkim-Action@v1 uses: microsoft/DevSkim-Action@v1
- name: Upload DevSkim scan results to GitHub Security tab - name: Upload DevSkim scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: devskim-results.sarif sarif_file: devskim-results.sarif
code-scanning/flawfinder.yml
+1 -1
View File
@@ -33,6 +33,6 @@ jobs:
output: 'flawfinder_results.sarif' output: 'flawfinder_results.sarif'
- name: Upload analysis results to GitHub Security tab - name: Upload analysis results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: ${{github.workspace}}/flawfinder_results.sarif sarif_file: ${{github.workspace}}/flawfinder_results.sarif
code-scanning/fortify.yml
+1 -1
View File
@@ -93,6 +93,6 @@ jobs:
# Import Fortify on Demand results to GitHub Security Code Scanning # Import Fortify on Demand results to GitHub Security Code Scanning
- name: Import Results - name: Import Results
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: ./gh-fortify-sast.sarif sarif_file: ./gh-fortify-sast.sarif
code-scanning/kubesec.yml
+1 -1
View File
@@ -36,6 +36,6 @@ jobs:
exit-code: "0" exit-code: "0"
- name: Upload Kubesec scan results to GitHub Security tab - name: Upload Kubesec scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: kubesec-results.sarif sarif_file: kubesec-results.sarif
code-scanning/mayhem-for-api.yml
+1 -1
View File
@@ -61,6 +61,6 @@ jobs:
sarif-report: mapi.sarif sarif-report: mapi.sarif
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: mapi.sarif sarif_file: mapi.sarif
code-scanning/mobsf.yml
+1 -1
View File
@@ -37,6 +37,6 @@ jobs:
args: . --sarif --output results.sarif || true args: . --sarif --output results.sarif || true
- name: Upload mobsfscan report - name: Upload mobsfscan report
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: results.sarif sarif_file: results.sarif
code-scanning/msvc.yml
+1 -1
View File
@@ -53,7 +53,7 @@ jobs:
# Upload SARIF file to GitHub Code Scanning Alerts # Upload SARIF file to GitHub Code Scanning Alerts
- name: Upload SARIF to GitHub - name: Upload SARIF to GitHub
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: ${{ steps.run-analysis.outputs.sarif }} sarif_file: ${{ steps.run-analysis.outputs.sarif }}
code-scanning/njsscan.yml
+1 -1
View File
@@ -36,6 +36,6 @@ jobs:
with: with:
args: '. --sarif --output results.sarif || true' args: '. --sarif --output results.sarif || true'
- name: Upload njsscan report - name: Upload njsscan report
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: results.sarif sarif_file: results.sarif
code-scanning/nowsecure.yml
+1 -1
View File
@@ -47,6 +47,6 @@ jobs:
group_id: {{ groupId }} # Update this to your desired Platform group ID group_id: {{ groupId }} # Update this to your desired Platform group ID
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: NowSecure.sarif sarif_file: NowSecure.sarif
code-scanning/ossar.yml
+1 -1
View File
@@ -44,6 +44,6 @@ jobs:
# Upload results to the Security tab # Upload results to the Security tab
- name: Upload OSSAR results - name: Upload OSSAR results
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: ${{ steps.ossar.outputs.sarifFile }} sarif_file: ${{ steps.ossar.outputs.sarifFile }}
code-scanning/pmd.yml
+1 -1
View File
@@ -31,6 +31,6 @@ jobs:
sourcePath: 'src/main/java' sourcePath: 'src/main/java'
analyzeModifiedFilesOnly: false analyzeModifiedFilesOnly: false
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: pmd-report.sarif sarif_file: pmd-report.sarif
code-scanning/powershell.yml
+1 -1
View File
@@ -37,6 +37,6 @@ jobs:
# Upload the SARIF file generated in the previous step # Upload the SARIF file generated in the previous step
- name: Upload SARIF results file - name: Upload SARIF results file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: results.sarif sarif_file: results.sarif
code-scanning/prisma.yml
+1 -1
View File
@@ -48,7 +48,7 @@ jobs:
# The service need to know the type of IaC being scanned # The service need to know the type of IaC being scanned
template_type: 'CFT' template_type: 'CFT'
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
# Results are generated only on a success or failure # Results are generated only on a success or failure
# this is required since GitHub by default won't run the next step # this is required since GitHub by default won't run the next step
# when the previous one has failed. # when the previous one has failed.
code-scanning/rubocop.yml
+1 -1
View File
@@ -47,6 +47,6 @@ jobs:
" "
- name: Upload Sarif output - name: Upload Sarif output
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: rubocop.sarif sarif_file: rubocop.sarif
code-scanning/securitycodescan.yml
+1 -1
View File
@@ -38,4 +38,4 @@ jobs:
uses: security-code-scan/security-code-scan-results-action@cdb3d5e639054395e45bf401cba8688fcaf7a687 uses: security-code-scan/security-code-scan-results-action@cdb3d5e639054395e45bf401cba8688fcaf7a687
- name: Upload sarif - name: Upload sarif
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
code-scanning/semgrep.yml
+1 -1
View File
@@ -42,7 +42,7 @@ jobs:
# Upload SARIF file generated in previous step # Upload SARIF file generated in previous step
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: semgrep.sarif sarif_file: semgrep.sarif
if: always() if: always()
code-scanning/shiftleft.yml
+1 -1
View File
@@ -42,6 +42,6 @@ jobs:
# type: python # type: python
- name: Upload report - name: Upload report
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: reports sarif_file: reports
code-scanning/snyk-container.yml
+1 -1
View File
@@ -43,6 +43,6 @@ jobs:
image: your/image-to-test image: your/image-to-test
args: --file=Dockerfile args: --file=Dockerfile
- name: Upload result to GitHub Code Scanning - name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: snyk.sarif sarif_file: snyk.sarif
code-scanning/snyk-infrastructure.yml
+1 -1
View File
@@ -42,6 +42,6 @@ jobs:
# or `main.tf` for a Terraform configuration file # or `main.tf` for a Terraform configuration file
file: your-file-to-test.yaml file: your-file-to-test.yaml
- name: Upload result to GitHub Code Scanning - name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: snyk.sarif sarif_file: snyk.sarif
code-scanning/synopsys-io.yml
+1 -1
View File
@@ -71,7 +71,7 @@ jobs:
- name: Upload SARIF file - name: Upload SARIF file
if: ${{steps.prescription.outputs.sastScan == 'true' }} if: ${{steps.prescription.outputs.sastScan == 'true' }}
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
# Path to SARIF file relative to the root of the repository # Path to SARIF file relative to the root of the repository
sarif_file: workflowengine-results.sarif.json sarif_file: workflowengine-results.sarif.json
code-scanning/sysdig-scan.yml
+1 -1
View File
@@ -54,7 +54,7 @@ jobs:
# Sysdig inline scanner requires privileged rights # Sysdig inline scanner requires privileged rights
run-as-user: root run-as-user: root
- uses: github/codeql-action/upload-sarif@v1 - uses: github/codeql-action/upload-sarif@v2
#Upload SARIF file #Upload SARIF file
if: always() if: always()
with: with:
code-scanning/tfsec.yml
+1 -1
View File
@@ -32,7 +32,7 @@ jobs:
sarif_file: tfsec.sarif sarif_file: tfsec.sarif
- name: Upload SARIF file - name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
# Path to SARIF file relative to the root of the repository # Path to SARIF file relative to the root of the repository
sarif_file: tfsec.sarif sarif_file: tfsec.sarif
code-scanning/trivy.yml
+1 -1
View File
@@ -42,6 +42,6 @@ jobs:
severity: 'CRITICAL,HIGH' severity: 'CRITICAL,HIGH'
- name: Upload Trivy scan results to GitHub Security tab - name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: 'trivy-results.sarif' sarif_file: 'trivy-results.sarif'
code-scanning/veracode.yml
+1 -1
View File
@@ -52,7 +52,7 @@ jobs:
uses: veracode/veracode-pipeline-scan-results-to-sarif@ff08ae5b45d5384cb4679932f184c013d34da9be uses: veracode/veracode-pipeline-scan-results-to-sarif@ff08ae5b45d5384cb4679932f184c013d34da9be
with: with:
pipeline-results-json: results.json pipeline-results-json: results.json
- uses: github/codeql-action/upload-sarif@v1 - uses: github/codeql-action/upload-sarif@v2
with: with:
# Path to SARIF file relative to the root of the repository # Path to SARIF file relative to the root of the repository
sarif_file: veracode-results.sarif sarif_file: veracode-results.sarif
code-scanning/xanitizer.yml
+1 -1
View File
@@ -88,6 +88,6 @@ jobs:
*-Findings-List.sarif *-Findings-List.sarif
# Uploads the findings into the GitHub code scanning alert section using the upload-sarif action # Uploads the findings into the GitHub code scanning alert section using the upload-sarif action
- uses: github/codeql-action/upload-sarif@v1 - uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: Xanitizer-Findings-List.sarif sarif_file: Xanitizer-Findings-List.sarif
deployments/azure-webapps-java-jar.yml
+2
View File
@@ -22,6 +22,7 @@ name: Build and deploy JAR app to Azure Web App
env: env:
AZURE_WEBAPP_NAME: your-app-name # set this to the name of your Azure Web App AZURE_WEBAPP_NAME: your-app-name # set this to the name of your Azure Web App
JAVA_VERSION: '11' # set this to the Java version to use JAVA_VERSION: '11' # set this to the Java version to use
DISTRIBUTION: zulu # set this to the Java distribution
on: on:
push: push:
@@ -40,6 +41,7 @@ jobs:
uses: actions/[email protected] uses: actions/[email protected]
with: with:
java-version: ${{ env.JAVA_VERSION }} java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.DISTRIBUTION }}
cache: 'maven' cache: 'maven'
- name: Build with Maven - name: Build with Maven