hello-java/.github/workflows/BitBucket-Polaris.yml at 454a7fabfbce79d5eef0e1ce6d620bf443b3c529 · Waizace/hello-java · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
name: CI-Polaris-
on:
  push:
    branches: [ main, master, develop, stage, release ]
  pull_request:
    branches: [ main, master, develop, stage, release ]
  workflow_dispatch:

jobs:
  build:
    runs-on: [ ubuntu-latest ]
    steps:
      - name: checkout-bitbucket
        run: git clone https://waizguy@bitbucket.org/jwpolaris/hello-java.git
      - name: Setup Java JDK
        uses: actions/setup-java@v4
        with:
           java-version: 11
           distribution: microsoft
           cache: maven
      - name: Polaris Scan
        uses: synopsys-sig/synopsys-action@v1.11.0
        env:
          DETECT_DETECTOR_SEARCH_DEPTH: 10
        with:
          ### SCANNING: Required fields
          polaris_server_url: ${{ vars.POLARIS_SERVERURL }}
          polaris_access_token: ${{ secrets.POLARIS_ACCESS_TOKEN }}
          polaris_assessment_types: "SCA,SAST"


          ### SCANNING: Optional fields
          polaris_application_name: AJW-${{ github.event.repository.name }}
          # polaris_project_name: ${{ github.event.repository.name }}

          ### PULL REQUEST COMMENTS: Uncomment below to enable
          polaris_prComment_enabled: true
          github_token: ${{ secrets.GITHUB_TOKEN }} # Required when PR comments is enabled

          ### SARIF report parameters
          polaris_reports_sarif_create: true
          polaris_upload_sarif_report: true