diff --git a/.github/workflows/shiftleft-inspect.yml b/.github/workflows/shiftleft-inspect.yml index 14b3ae5..1bf98aa 100644 --- a/.github/workflows/shiftleft-inspect.yml +++ b/.github/workflows/shiftleft-inspect.yml @@ -20,7 +20,9 @@ jobs: run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})" id: extract_branch - name: NextGen Static Analysis - run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-python-example --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python . + run: | + ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-python-example --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python . + ${GITHUB_WORKSPACE}/sl modify-findings --app shiftleft-python-example env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} Build-Rules: diff --git a/inspect.yml b/inspect.yml new file mode 100644 index 0000000..35e5f7d --- /dev/null +++ b/inspect.yml @@ -0,0 +1,21 @@ +inspect: +- app: + name: shiftleft-python-example + modify-findings: + - downgrade_sqli + +finding-modifications: + downgrade_sqli: + # Use filter to specify the category + filter: + category: + - SQL Injection + # Specify the value for the tags such as cvss_score, severity that you would like to use + # Optionally, you can add any custom tag. Eg: a reason tag is added here + tags: + - key: cvss_score + value: 5 + - key: severity + value: moderate + - key: reason + value: appsec_approved