diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml new file mode 100644 index 00000000..e366fbc3 --- /dev/null +++ b/.github/workflows/main.yml @@ -0,0 +1,38 @@ +# This workflow integrates Qwiet preZero with GitHub +# Visit https://docs.shiftleft.io for help +name: Qwiet + +on: + pull_request: + workflow_dispatch: + push: + # We recommend triggering a scan when merging to your default branch + # as a best practice, especially if you'd like to compare the results + # of two scans (e.g., a feature branch against the default branch) + branches: + - main + - master +jobs: + ngsast-build: + runs-on: ubuntu-20.04 + steps: + - uses: actions/checkout@v2 + + - name: Download the Qwiet CLI and set permissions + run: | + curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl + + # Qwiet requires Java 1.8 + - name: Set up Java + uses: actions/setup-java@v1.4.3 + with: + java-version: 1.8 + + - name: Package with Maven + run: mvn clean package + + - name: NextGen Static Analysis + run: ${GITHUB_WORKSPACE}/sl analyze --app ShiftLeftJava --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --vcs-prefix-correction "io/shiftleft=src/main/java/" --java $(pwd)/target/yourJarFileName.jar + + env: + SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }}