From 385d1c61d5dd6d302d34ccf597bdb45100e9bbfe Mon Sep 17 00:00:00 2001 From: junghanlee <73509756+junghanlee@users.noreply.github.com> Date: Thu, 25 Feb 2021 11:50:26 +0900 Subject: [PATCH 1/2] [SC-159] SAST vulnerability Scan Result --- .github/workflows/scan.yml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 .github/workflows/scan.yml diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml new file mode 100644 index 00000000..d9dd9fa3 --- /dev/null +++ b/.github/workflows/scan.yml @@ -0,0 +1,23 @@ +name: SL Scan + +on: push + +jobs: + NextGen-Static-Analysis: + runs-on: ubuntu-20.04 + steps: + - uses: actions/checkout@v2 + - name: Perform Scan + uses: ShiftLeftSecurity/scan-action@master + env: + WORKSPACE: "" + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + SCAN_AUTO_BUILD: true + with: + output: reports + + - name: Upload report + uses: actions/upload-artifact@v2 + with: + name: shiftleft-scan-reports + path: reports From 2351c78d2cc1fc3cd489b5f846ae6dff5801076e Mon Sep 17 00:00:00 2001 From: junghanlee <73509756+junghanlee@users.noreply.github.com> Date: Thu, 25 Feb 2021 13:43:39 +0900 Subject: [PATCH 2/2] Update scan.yml --- .github/workflows/scan.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index d9dd9fa3..5330f594 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -2,6 +2,7 @@ name: SL Scan on: push + jobs: NextGen-Static-Analysis: runs-on: ubuntu-20.04