From 4adc305c13ab9f4187cd0e0676fe81dc2bf397f5 Mon Sep 17 00:00:00 2001 From: REDDY PRASAD <15084222+reddyprasade@users.noreply.github.com> Date: Mon, 26 Dec 2022 15:22:12 +0530 Subject: [PATCH 1/8] Create boman.yaml --- boman.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 boman.yaml diff --git a/boman.yaml b/boman.yaml new file mode 100644 index 0000000..237aeb2 --- /dev/null +++ b/boman.yaml @@ -0,0 +1,16 @@ +Auth: + project_token: "b07830b5-3604-411c-9552-2229076fb7a1" + customer_token: "1f3dc7b3-cb4e-4eb9-b5ee-c780947f12e3" #devtokens + +SCA: + language: "java", + +SAST: + language: "semgrep" + # SAST + +DAST: + type: "WEB" ## API, WEB, WEB-ADV + URL: "http://devapi.boman.ai" + +Secret_Scan: True From eaf3ad171946eb56ed1fd6c0087b3fee07ad9cc1 Mon Sep 17 00:00:00 2001 From: REDDY PRASAD <15084222+reddyprasade@users.noreply.github.com> Date: Mon, 26 Dec 2022 15:24:41 +0530 Subject: [PATCH 2/8] Create ant.yml --- .github/workflows/ant.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .github/workflows/ant.yml diff --git a/.github/workflows/ant.yml b/.github/workflows/ant.yml new file mode 100644 index 0000000..b814d70 --- /dev/null +++ b/.github/workflows/ant.yml @@ -0,0 +1,14 @@ +on: [push] + +jobs: + boman_scan: + runs-on: ubuntu-latest + name: Test Job + steps: + - name: Checkout + uses: actions/checkout@v3 + # Runs a single command using the runners shell + - name: Install packages + run: sudo pip install --extra-index-url https://test.pypi.org/simple/ boman-cli-uat==0.7 + - name: Run scan + run: sudo boman-cli -a run -u https://devapi.boman.ai/v2/ From 75fa9ce48f1e5f82ad371af48668c35825aa2924 Mon Sep 17 00:00:00 2001 From: REDDY PRASAD <15084222+reddyprasade@users.noreply.github.com> Date: Mon, 26 Dec 2022 15:28:18 +0530 Subject: [PATCH 3/8] Update ant.yml --- .github/workflows/ant.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ant.yml b/.github/workflows/ant.yml index b814d70..8cdf8fc 100644 --- a/.github/workflows/ant.yml +++ b/.github/workflows/ant.yml @@ -9,6 +9,6 @@ jobs: uses: actions/checkout@v3 # Runs a single command using the runners shell - name: Install packages - run: sudo pip install --extra-index-url https://test.pypi.org/simple/ boman-cli-uat==0.7 + run: sudo pip install boman-cli - name: Run scan run: sudo boman-cli -a run -u https://devapi.boman.ai/v2/ From cf089aa497da2e7a43f9c3937571476ea817e62c Mon Sep 17 00:00:00 2001 From: REDDY PRASAD <15084222+reddyprasade@users.noreply.github.com> Date: Mon, 26 Dec 2022 15:31:35 +0530 Subject: [PATCH 4/8] Update boman.yaml --- boman.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/boman.yaml b/boman.yaml index 237aeb2..0e815de 100644 --- a/boman.yaml +++ b/boman.yaml @@ -9,8 +9,8 @@ SAST: language: "semgrep" # SAST -DAST: - type: "WEB" ## API, WEB, WEB-ADV - URL: "http://devapi.boman.ai" +#DAST: +# type: "WEB" ## API, WEB, WEB-ADV +# URL: "http://devapi.boman.ai" Secret_Scan: True From 06d6be950025b4a41362563018acc37d5243c360 Mon Sep 17 00:00:00 2001 From: REDDY PRASAD <15084222+reddyprasade@users.noreply.github.com> Date: Mon, 26 Dec 2022 15:41:34 +0530 Subject: [PATCH 5/8] Update boman.yaml --- boman.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/boman.yaml b/boman.yaml index 0e815de..752b3e0 100644 --- a/boman.yaml +++ b/boman.yaml @@ -8,9 +8,9 @@ SCA: SAST: language: "semgrep" # SAST - -#DAST: -# type: "WEB" ## API, WEB, WEB-ADV -# URL: "http://devapi.boman.ai" + +DAST: + type: "WEB" ## API, WEB, WEB-ADV + URL: "http://devapi.boman.ai" Secret_Scan: True From 71034a062d53f0f05b9880b065a8093552ae0d3b Mon Sep 17 00:00:00 2001 From: REDDY PRASAD Date: Thu, 30 Mar 2023 13:31:18 +0530 Subject: [PATCH 6/8] Update boman.yaml --- boman.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/boman.yaml b/boman.yaml index 752b3e0..ac832dd 100644 --- a/boman.yaml +++ b/boman.yaml @@ -6,11 +6,11 @@ SCA: language: "java", SAST: - language: "semgrep" + language: "java" # SAST DAST: type: "WEB" ## API, WEB, WEB-ADV - URL: "http://devapi.boman.ai" + URL: "https://www.cnpanda.net/" Secret_Scan: True From 1794e80a12fac62bd18e838e35f50315b9aed188 Mon Sep 17 00:00:00 2001 From: REDDY PRASAD Date: Thu, 30 Mar 2023 13:33:17 +0530 Subject: [PATCH 7/8] Update ant.yml --- .github/workflows/ant.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ant.yml b/.github/workflows/ant.yml index 8cdf8fc..eccb6b5 100644 --- a/.github/workflows/ant.yml +++ b/.github/workflows/ant.yml @@ -9,6 +9,6 @@ jobs: uses: actions/checkout@v3 # Runs a single command using the runners shell - name: Install packages - run: sudo pip install boman-cli + run: sudo pip install -i https://test.pypi.org/simple/ boman-cli-uat==0.21 - name: Run scan run: sudo boman-cli -a run -u https://devapi.boman.ai/v2/ From 1a22f81b61007793665cca1b293651a82d9e1edb Mon Sep 17 00:00:00 2001 From: REDDY PRASAD Date: Thu, 30 Mar 2023 13:35:47 +0530 Subject: [PATCH 8/8] Update ant.yml --- .github/workflows/ant.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ant.yml b/.github/workflows/ant.yml index eccb6b5..ba57bd2 100644 --- a/.github/workflows/ant.yml +++ b/.github/workflows/ant.yml @@ -9,6 +9,6 @@ jobs: uses: actions/checkout@v3 # Runs a single command using the runners shell - name: Install packages - run: sudo pip install -i https://test.pypi.org/simple/ boman-cli-uat==0.21 + run: pip install -i https://test.pypi.org/simple/ boman-cli-uat==0.21 - name: Run scan - run: sudo boman-cli -a run -u https://devapi.boman.ai/v2/ + run: boman-cli -a run -u https://devapi.boman.ai/v2/