|
| 1 | +<<<<<<< Updated upstream |
1 | 2 | # This workflow integrates Qwiet preZero with GitHub |
2 | 3 | # Visit https://docs.shiftleft.io for help |
3 | 4 | name: Qwiet |
| 5 | +======= |
| 6 | +# This workflow integrates Qwiet preZero |
| 7 | +name: QwietAFPRnBR |
| 8 | +>>>>>>> Stashed changes |
4 | 9 |
|
5 | 10 | on: |
6 | 11 | pull_request: |
7 | 12 | workflow_dispatch: |
8 | | - push: |
9 | | - # We recommend triggering a scan when merging to your default branch |
10 | | - # as a best practice, especially if you'd like to compare the results |
11 | | - # of two scans (e.g., a feature branch against the default branch) |
12 | | - branches: |
13 | | - - main |
14 | | - - master |
15 | | - |
| 13 | + schedule: |
| 14 | + # * is a special character in YAML so you have to quote this string |
| 15 | + - cron: '0 11 * * 6' |
16 | 16 | jobs: |
17 | | - ngsast-build: |
18 | | - runs-on: ubuntu-20.04 |
| 17 | + NextGen-Static-Analysis: |
| 18 | + runs-on: ubuntu-latest |
19 | 19 | steps: |
20 | | - - uses: actions/checkout@v2 |
| 20 | + - uses: actions/checkout@v3 |
| 21 | + |
| 22 | + - name: Setup Java JDK v8 |
| 23 | + uses: actions/setup-java@v3 |
| 24 | + with: |
| 25 | + distribution: zulu |
| 26 | + java-version: 8 |
21 | 27 |
|
22 | | - - name: Download the Qwiet CLI and set permissions |
| 28 | + - name: Download Qwiet CLI |
23 | 29 | run: | |
24 | 30 | curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl |
25 | 31 |
|
26 | | - # Qwiet requires Java 1.8 |
27 | | - - name: Set up Java |
28 | | - |
29 | | - with: |
30 | | - java-version: 1.8 |
| 32 | + - name: Extract branch name |
| 33 | + shell: bash |
| 34 | + run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})" |
| 35 | + id: extract_branch |
31 | 36 |
|
| 37 | +<<<<<<< Updated upstream |
32 | 38 | - name: NextGen Static Analysis |
33 | 39 | run: ${GITHUB_WORKSPACE}/sl analyze --app shiftleft-python-demo-GH --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python . |
| 40 | +======= |
| 41 | + - name: preZero NextGen Static Analysis |
| 42 | + run: ${GITHUB_WORKSPACE}/sl analyze --strict --wait --verbose --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} |
| 43 | +>>>>>>> Stashed changes |
34 | 44 | env: |
35 | 45 | SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} |
| 46 | + SHIFTLEFT_API_HOST: www.shiftleft.io |
| 47 | + SHIFTLEFT_GRPC_TELEMETRY_HOST: telemetry.shiftleft.io:443 |
| 48 | + SHIFTLEFT_GRPC_API_HOST: api.shiftleft.io:443 |
0 commit comments