diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 03ba2d73..f06982e0 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -17,11 +17,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v2 - name: Checkmarx AST CLI Action uses: checkmarx/ast-github-action@main #Github Action version with: base_uri: https://eu.ast.checkmarx.net/ cx_tenant: beta_nova8 - cx_client_id: ${{secrets.CX_CLIENT_ID}} - cx_client_secret: ${{secrets.CX_CLIENT_SECRET}} + cx_client_id: ${{ secrets.CX_CLIENT_ID }} + cx_client_secret: ${{ secrets.CX_CLIENT_SECRET }} + #additional_params: --sast-incremental --scan-types sast,iac-security,sca --threshold sast-high=1; kics-high=1; sca-high=1 --file-filter !test,!swagger,!docs,!*test.go --sca-filter !**\Dockerfile --sast-filter !**/src,!**/root,!**/test diff --git a/azure-pipelines.yml b/azure-pipelines.yml new file mode 100644 index 00000000..fb05f917 --- /dev/null +++ b/azure-pipelines.yml @@ -0,0 +1,25 @@ +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: ubuntu-latest + +resources: + repositories: + - repository: CheckmarxYamlTemplates + type: git + name: DevSecOps/CheckmarxYamlTemplates + ref: master + +variables: + cxTeam: 'CxServer\JornadaIngresso\JIFU' + cxProjectName: '$(Build.DefinitionName)' + + +steps: + - template: NightlyAsync.AllInOne.yaml@CheckmarxYamlTemplates