File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11name : Checkmarx One Scan
2-
3- on : [ pull_request, workflow_dispatch ]
2+ on :
3+ workflow_dispatch :
4+ pull_request :
5+ push :
6+ branches :
7+ - main
8+ schedule :
9+ - cron : ' 00 7 * * *' # Every day at 07:00
410
511jobs :
612 cx-scan :
1521 cx_tenant : ${{ secrets.AST_RND_SCANS_TENANT }}
1622 cx_client_id : ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
1723 cx_client_secret : ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
18- additional_params : --tags phoenix --threshold "sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1;"
24+ additional_params : --tags sypher --threshold "sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1;"
25+ notify :
26+ needs : cx-scan
27+ uses : Checkmarx/plugins-release-workflow/.github/workflows/cxone-scan-teams-notify.yml@38cf7ab29e5021bb817ac38bdae3ac0fb210608c
28+ if : always()
29+ with :
30+ cx_result : ${{ needs.cx-scan.result }}
31+ repository : ${{ github.repository }}
32+ ref_name : ${{ github.ref_name }}
33+ actor : ${{ github.actor }}
34+ event_name : ${{ github.event_name }}
35+ run_id : ${{ github.run_id }}
36+ server_url : ${{ github.server_url }}
37+ secrets :
38+ teams_webhook_url : ${{ secrets.CXONE_SCAN_WEBHOOK_URL }}
You can’t perform that action at this time.
0 commit comments