From c63ef2137509f24dd82c6202c8feb592df37c428 Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Thu, 3 Oct 2024 17:47:29 +0200 Subject: [PATCH 1/9] my msg --- .github/workflows/xygeni-labdev-tuneado.yml | 40 +++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 .github/workflows/xygeni-labdev-tuneado.yml diff --git a/.github/workflows/xygeni-labdev-tuneado.yml b/.github/workflows/xygeni-labdev-tuneado.yml new file mode 100644 index 0000000000..234f9931e4 --- /dev/null +++ b/.github/workflows/xygeni-labdev-tuneado.yml @@ -0,0 +1,40 @@ +name: Xygeni Scan (tuneado) +on: + workflow_dispatch: # Allows manual triggering + # no push triggers + # no pull request triggers + # no schedule triggers + repository_dispatch: + types: [Scan] + +jobs: + xygeni-scan: + name: Xygeni Scan + runs-on: ubuntu-latest + steps: + - name: Set Xygeni env + run: | + echo xy_url "${{ github.event.client_payload.xy_url }}" + + + - uses: actions/checkout@v3 + with: + fetch-depth: 0 # Shallow clones should be disabled for better relevancy of analysis + + + + - name: Xygeni-Scanner + uses: xygeni/xygeni-action@v3.2.0 + id: Xygeni-Scanner + with: + xygeni_url: "${{ github.event.client_payload.xy_url }}" + token: "${{ github.event.client_payload.xy_token }}" + gh_token: ${{ secrets.PAT_FOR_XYGENI_SCAN }} + command: scan --never-fail --include-collaborators --no-upload -f json -o reports/${{ github.repository }} -n ${{ github.repository }} + + - name: Archive building artifacts + uses: actions/upload-artifact@v3 + with: + name: archive-bin + path: | + reports From 9e661cb5685c9a9f7d6d94a8f74745cf8e0c72c5 Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Thu, 3 Oct 2024 17:47:49 +0200 Subject: [PATCH 2/9] my msg --- .github/workflows/DownloadAndRun.yml | 65 ++++++++++++++++++++++++++++ 1 file changed, 65 insertions(+) create mode 100644 .github/workflows/DownloadAndRun.yml diff --git a/.github/workflows/DownloadAndRun.yml b/.github/workflows/DownloadAndRun.yml new file mode 100644 index 0000000000..1f26f7a965 --- /dev/null +++ b/.github/workflows/DownloadAndRun.yml @@ -0,0 +1,65 @@ +name: Download And Run +on: + workflow_dispatch: # Allows manual triggering + # no push triggers + # no pull request triggers + # no schedule triggers + repository_dispatch: + types: [Upload] + +jobs: + xygeni-scan: + name: Xygeni Scan + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + with: + fetch-depth: 0 # Shallow clones should be disabled for better relevancy of analysis + + - name: Xygeni-Scanner + uses: xygeni/xygeni-action@v3.2.0 + id: Xygeni-Scanner + with: + xygeni_url: "${{ github.event.client_payload.xy_url }}" + token: "${{ github.event.client_payload.xy_token }}" + gh_token: ${{ secrets.PAT_FOR_XYGENI_SCAN }} + command: scan --help + + - name: Download artifact + id: download-artifact + uses: dawidd6/action-download-artifact@v6 + with: + workflow: xygeni-labdev-tuneado.yml + name: archive-bin + + + - name: Uploading reports .. + run: | + echo Executing Xygeni scan .... + echo ${{ github.event.repository.name }} + declare -i loops="${{ github.event.client_payload.loops }}" + echo LOOPS $loops + + ls -l + + ls -l /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos + ls -l /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/* + for i in $(ls /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/) + do + echo $i + cp /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/$i "/home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/${i}.json" + done + ls -l /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/ + #cat /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/deps.*.json + + for ((i=1; i<=loops; i++)); do + echo Vuelta $i + $HOME/.xygeni/xygeni report-upload -n ${{ github.event.repository.name }}-$i \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/codetamper.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/compliance.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/iac.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/inventory.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/misconf.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/secrets.*.json \ + -r /home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/LGVExternalRepos/suspectdeps.*.json + done From 3620ec21ee01810c4d9b3d41a51da9ab9fe60540 Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Fri, 4 Oct 2024 08:32:32 +0200 Subject: [PATCH 3/9] my msg From 7bdb7e7784870b557cbee172508a7e8042222e8b Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Fri, 4 Oct 2024 08:32:45 +0200 Subject: [PATCH 4/9] my msg From 285c447ded92b7c0bb4b19e2b79feb290ab039ff Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Fri, 4 Oct 2024 08:41:35 +0200 Subject: [PATCH 5/9] Rename maven.yml to maven.yml.ok --- .github/workflows/{maven.yml => maven.yml.ok} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename .github/workflows/{maven.yml => maven.yml.ok} (100%) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml.ok similarity index 100% rename from .github/workflows/maven.yml rename to .github/workflows/maven.yml.ok From 0da469c2365de8e19659eb4d76d2e54201b60109 Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Fri, 4 Oct 2024 08:41:55 +0200 Subject: [PATCH 6/9] Rename codeql-analysis.yml to codeql-analysis.yml.ok --- .github/workflows/{codeql-analysis.yml => codeql-analysis.yml.ok} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename .github/workflows/{codeql-analysis.yml => codeql-analysis.yml.ok} (100%) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml.ok similarity index 100% rename from .github/workflows/codeql-analysis.yml rename to .github/workflows/codeql-analysis.yml.ok From 4303a0efcdaee4a4e28646bf8f22b386207a1569 Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Fri, 4 Oct 2024 08:42:12 +0200 Subject: [PATCH 7/9] Rename snapshot.yml to snapshot.yml.ok --- .github/workflows/{snapshot.yml => snapshot.yml.ok} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename .github/workflows/{snapshot.yml => snapshot.yml.ok} (95%) diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml.ok similarity index 95% rename from .github/workflows/snapshot.yml rename to .github/workflows/snapshot.yml.ok index b8a7c82c1d..4902ee2983 100644 --- a/.github/workflows/snapshot.yml +++ b/.github/workflows/snapshot.yml.ok @@ -39,4 +39,4 @@ jobs: env: OSSRH_USERNAME: ${{ secrets.SNAPSHOT_UPLOAD_USER }} OSSRH_TOKEN: ${{ secrets.SNAPSHOT_UPLOAD_PASSWORD }} - GPG_PASSPHRASE: ${{ secrets.GPG_PASSWORD }} \ No newline at end of file + GPG_PASSPHRASE: ${{ secrets.GPG_PASSWORD }} From a905fd6cf1c57b45351d6bfcbc382b02ffb5fc2c Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Fri, 4 Oct 2024 08:53:59 +0200 Subject: [PATCH 8/9] my msg From e0ef79a9b901b5d82902ddfd9ad9ed9d23f2ef80 Mon Sep 17 00:00:00 2001 From: luisgarciaxygeni <129273100+luisgarciaxygeni@users.noreply.github.com> Date: Fri, 4 Oct 2024 08:54:11 +0200 Subject: [PATCH 9/9] my msg