Skip to content

Commit dbc80ad

Browse files
Added notification for CxOne Scan
1 parent 0dcfeb6 commit dbc80ad

1 file changed

Lines changed: 23 additions & 3 deletions

File tree

.github/workflows/ast-scan.yml

Lines changed: 23 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,12 @@
11
name: Checkmarx One Scan
2-
3-
on: [ pull_request, workflow_dispatch ]
2+
on:
3+
workflow_dispatch:
4+
pull_request:
5+
push:
6+
branches:
7+
- main
8+
schedule:
9+
- cron: '00 7 * * *' # Every day at 07:00
410

511
jobs:
612
cx-scan:
@@ -15,4 +21,18 @@ jobs:
1521
cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }}
1622
cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
1723
cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
18-
additional_params: --tags phoenix --threshold "sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1;"
24+
additional_params: --tags sypher --threshold "sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1;"
25+
notify:
26+
needs: cx-scan
27+
uses: Checkmarx/plugins-release-workflow/.github/workflows/cxone-scan-teams-notify.yml@38cf7ab29e5021bb817ac38bdae3ac0fb210608c
28+
if: always()
29+
with:
30+
cx_result: ${{ needs.cx-scan.result }}
31+
repository: ${{ github.repository }}
32+
ref_name: ${{ github.ref_name }}
33+
actor: ${{ github.actor }}
34+
event_name: ${{ github.event_name }}
35+
run_id: ${{ github.run_id }}
36+
server_url: ${{ github.server_url }}
37+
secrets:
38+
teams_webhook_url: ${{ secrets.CXONE_SCAN_WEBHOOK_URL }}

0 commit comments

Comments
 (0)