Merge pull request #1238 from meme/nowsecure

Add NowSecure starter workflow
2021-11-15 22:23:51 +00:00
parent 56c93ff752 f61ca9907b
commit da223f8a03
3 changed files with 94 additions and 0 deletions
@@ -0,0 +1,52 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+#
+# NowSecure: The Mobile Security Experts <https://www.nowsecure.com/>.
+#
+# To use this workflow, you must be an existing NowSecure customer with GitHub Advanced Security (GHAS) enabled for your
+# repository.
+#
+# If you *are not* an existing customer, click here to contact us for licensing and pricing details:
+# <https://info.nowsecure.com/github-request>.
+#
+# Instructions:
+#
+# 1. In the settings for your repository, click "Secrets" then "New repository secret". Name the secret "NS_TOKEN" and
+#    paste in your Platform token. If you do not have a Platform token, or wish to create a new one for GitHub, visit
+#    NowSecure Platform and go to "Profile & Preferences" then create a token labelled "GitHub".
+#
+# 2. Follow the annotated workflow below and make any necessary modifications then save the workflow to your repository
+#    and review the "Security" tab once the action has run.
+
+name: "NowSecure"
+
+on:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    branches: [ $default-branch ]
+
+jobs:
+  nowsecure:
+    name: NowSecure
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Build your application
+        run: ./gradlew assembleDebug              # Update this to build your Android or iOS application
+
+      - name: Run NowSecure
+        uses: nowsecure/nowsecure-action@3b439db31b6dce857b09f5222fd13ffc3159ad26
+        with:
+          token: ${{ secrets.NS_TOKEN }}
+          app_file: app-debug.apk                 # Update this to a path to your .ipa or .apk
+          group_id: {{ groupId }}                 # Update this to your desired Platform group ID
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v1
+        with:
+          sarif_file: NowSecure.sarif
@@ -0,0 +1,21 @@
+{
+    "name": "NowSecure",
+    "creator": "NowSecure",
+    "description": "The NowSecure Action delivers fast, accurate, automated security analysis of iOS and Android apps coded in any language",
+    "iconName": "nowsecure",
+    "categories": [
+        "Code Scanning",
+        "Java",
+        "Kotlin",
+        "Scala",
+        "Swift",
+        "Objective C",
+        "C",
+        "C++",
+        "C#",
+        "Rust",
+        "JavaScript",
+        "TypeScript",
+        "Node"
+    ]
+}
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Generator: Adobe Illustrator 25.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0)  -->
+<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"
+	 viewBox="0 0 720 720" style="enable-background:new 0 0 720 720;" xml:space="preserve">
+<style type="text/css">
+	.st0{fill:#0099FF;}
+</style>
+<g>
+	<path class="st0" d="M699,316.2L567.8,88.6c-15.6-27.1-44.7-43.9-76-43.9H360.3H228.4c-31.2,0-60.2,16.8-75.9,43.7L21.1,315.1
+		c-15.7,27.1-15.7,60.8,0,88l65.6,113.2c0.2,0.3,0.3,0.7,0.5,1l94.4,158h310.2c31.3,0,60.4-16.8,76-43.9L699,403.8
+		C714.6,376.8,714.5,343.3,699,316.2z M65.4,340.8l131.4-226.7c6.5-11.2,18.6-18.2,31.6-18.2h87.5L109.4,453.3l-44-75.9
+		C58.9,366.1,58.9,352.1,65.4,340.8z M443.6,268.1l53.1,91.9l-151.3,264H237.5L443.6,268.1z M654.6,378.3L523.5,605.8
+		c-6.5,11.3-18.6,18.3-31.6,18.3h-87.4l144-251.4c1.4-2.4,2.3-5,2.9-7.6c0-0.1,0-0.2,0.1-0.3c0.1-0.3,0.1-0.6,0.1-0.9
+		c0-0.2,0.1-0.5,0.1-0.7c0-0.4,0.1-0.7,0.1-1.1c0-0.2,0-0.4,0.1-0.6c0-0.4,0-0.7,0-1.1c0-0.2,0-0.4,0-0.6c0-0.4,0-0.7,0-1.1
+		c0-0.2,0-0.4,0-0.5c0-0.4-0.1-0.8-0.1-1.2c0-0.1,0-0.3,0-0.4c0-0.3-0.1-0.6-0.1-0.9c0-0.3-0.1-0.5-0.1-0.8
+		c-0.1-0.3-0.1-0.6-0.2-0.9c-0.1-0.3-0.1-0.5-0.2-0.8c-0.1-0.4-0.2-0.7-0.3-1.1c-0.1-0.2-0.1-0.3-0.2-0.5c-0.5-1.6-1.2-3.1-2.1-4.6
+		l-82.6-143c-1.1-2-2.5-3.8-4.1-5.3c-4.7-4.7-11.2-7.5-18-7.5h0h0c-1.5,0-3,0.1-4.4,0.4c-0.4,0.1-0.7,0.1-1.1,0.2
+		c-5.8,1.3-11,4.5-14.6,9.1c-0.1,0.1-0.1,0.1-0.2,0.2c-0.1,0.2-0.2,0.3-0.4,0.5c-0.5,0.7-1.1,1.5-1.5,2.3L193.1,598.5l-54.2-94
+		L375,95.9h116.8c13,0,25.1,7,31.6,18.3l131.2,227.6C661.1,353.1,661.1,367,654.6,378.3z"/>
+</g>
+</svg>