@@ -6,31 +6,35 @@ name: Qwiet
6
6
on :
7
7
pull_request :
8
8
workflow_dispatch :
9
- push :
10
- # We recommend triggering a scan when merging to your default branch
11
- # as a best practice, especially if you'd like to compare the results
12
- # of two scans (e.g., a feature branch against the default branch)
13
- branches :
14
- - main
15
- - master
16
-
9
+ schedule :
10
+ # * is a special character in YAML so you have to quote this string
11
+ - cron : ' 0 11 * * 6'
17
12
jobs :
18
- ngsast-build :
19
- runs-on : ubuntu-20.04
13
+ NextGen-Static-Analysis :
14
+ runs-on : ubuntu-latest
20
15
steps :
21
- - uses : actions/checkout@v2
16
+ - uses : actions/checkout@v3
17
+
18
+ - name : Setup Java JDK v8
19
+ uses : actions/setup-java@v3
20
+ with :
21
+ distribution : zulu
22
+ java-version : 8
22
23
23
- - name : Download the Qwiet CLI and set permissions
24
+ - name : Download Qwiet CLI
24
25
run : |
25
26
curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl
26
27
27
- # Qwiet requires Java 1.8
28
- - name : Set up Java
29
-
30
- with :
31
- java-version : 1.8
28
+ - name : Extract branch name
29
+ shell : bash
30
+ run : echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})"
31
+ id : extract_branch
32
+
33
+ - name : preZero NextGen Static Analysis
34
+ run : ${GITHUB_WORKSPACE}/sl analyze --strict --wait --verbose --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }}
32
35
33
- - name : NextGen Static Analysis
34
- run : ${GITHUB_WORKSPACE}/sl analyze --app shiftleft-python-demo-GH --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} .
35
36
env :
36
37
SHIFTLEFT_ACCESS_TOKEN : ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }}
38
+ SHIFTLEFT_API_HOST : www.shiftleft.io
39
+ SHIFTLEFT_GRPC_TELEMETRY_HOST : telemetry.shiftleft.io:443
40
+ SHIFTLEFT_GRPC_API_HOST : api.shiftleft.io:443
0 commit comments