File tree Expand file tree Collapse file tree 1 file changed +5
-21
lines changed
Expand file tree Collapse file tree 1 file changed +5
-21
lines changed Original file line number Diff line number Diff line change 1+
12---
23# This workflow integrates ShiftLeft NG SAST with GitHub
34# Visit https://docs.shiftleft.io for help
4- name : ShiftLeft-demo
5+ name : Qwiet-run
56
67on :
7- push :
8- branches :
9- - main
10- - master
118 pull_request :
129 workflow_dispatch :
13-
1410jobs :
15- NextGen-Static-Analyis :
11+ NextGen-Static-Analysis :
1612 runs-on : ubuntu-latest
1713 steps :
18- - uses : actions/checkout@v2
19- # We are building this application with Java 11
20- - name : Setup Java JDK
21- 22- with :
23- java-version : 11.0.x
24- - name : Build and package with Maven
25- run : mvn clean package -DskipTests
14+ - uses : actions/checkout@v3
2615 - name : Download ShiftLeft CLI
2716 run : |
2817 curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl
29- # ShiftLeft requires Java 1.8. Post the package step override the version
30- - name : Setup Java JDK
31- 32- with :
33- java-version : 1.8
3418 - name : Extract branch name
3519 shell : bash
3620 run : echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})"
3721 id : extract_branch
3822 - name : NextGen Static Analysis
39- run : ${GITHUB_WORKSPACE}/sl analyze --wait --app java-sec-code-test --remediation-config remediation-sdl.yaml -- tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --vcs-prefix-correction "*=/src/main/java" --java ./target/java-sec-code-1.0.0.jar
23+ run : ${GITHUB_WORKSPACE}/sl analyze --wait --app java-sec-code-test --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }}
4024 env :
4125 SHIFTLEFT_ACCESS_TOKEN : ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }}
4226 - name : Validate Build Rules
You can’t perform that action at this time.
0 commit comments