From d25eefdf2cd80fd449007fcd73a81d085d09cd69 Mon Sep 17 00:00:00 2001 From: Prabhu Subramanian Date: Fri, 16 Oct 2020 20:27:23 +0100 Subject: [PATCH 1/2] Update shiftleft-inspect.yml --- .github/workflows/shiftleft-inspect.yml | 15 ++------------- 1 file changed, 2 insertions(+), 13 deletions(-) diff --git a/.github/workflows/shiftleft-inspect.yml b/.github/workflows/shiftleft-inspect.yml index 9882ae9..c2677d3 100644 --- a/.github/workflows/shiftleft-inspect.yml +++ b/.github/workflows/shiftleft-inspect.yml @@ -20,19 +20,8 @@ jobs: run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})" id: extract_branch - name: NextGen Static Analysis - run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-python-example --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python . - env: - SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} - Build-Rules: - runs-on: ubuntu-latest - needs: NextGen-Static-Analysis - steps: - - uses: actions/checkout@v2 - - name: Download ShiftLeft CLI run: | - curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl - - name: Validate Build Rules - run: ${GITHUB_WORKSPACE}/sl check-analysis --app shiftleft-python-example --branch "${{ github.head_ref || steps.extract_branch.outputs.branch }}" --report --github-pr-number=${{github.event.number}} --github-pr-user=${{ github.repository_owner }} --github-pr-repo=${{ github.event.repository.name }} --github-token=${{ secrets.GITHUB_TOKEN }} + ${GITHUB_WORKSPACE}/sl analyze --wait --app import_test --tag app.group=SLPy --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python $(pwd)/import_test + ${GITHUB_WORKSPACE}/sl analyze --wait --app vulnerable_code --tag app.group=SLPy --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python $(pwd)/vulnerable_code env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} - From a654df389a121ab602e5bbb2bda6f9df67ae5117 Mon Sep 17 00:00:00 2001 From: Prabhu Subramanian Date: Mon, 19 Oct 2020 17:41:03 +0100 Subject: [PATCH 2/2] Update shiftleft-inspect.yml --- .github/workflows/shiftleft-inspect.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/shiftleft-inspect.yml b/.github/workflows/shiftleft-inspect.yml index c2677d3..c822071 100644 --- a/.github/workflows/shiftleft-inspect.yml +++ b/.github/workflows/shiftleft-inspect.yml @@ -22,6 +22,6 @@ jobs: - name: NextGen Static Analysis run: | ${GITHUB_WORKSPACE}/sl analyze --wait --app import_test --tag app.group=SLPy --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python $(pwd)/import_test - ${GITHUB_WORKSPACE}/sl analyze --wait --app vulnerable_code --tag app.group=SLPy --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python $(pwd)/vulnerable_code + ${GITHUB_WORKSPACE}/sl analyze --wait --app vulnerable_code --tag app.group=SLPy --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python vulnerable_code env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }}