Skip to content

Commit bd7e374

Browse files
AST-142374: update cx-one-scan
1 parent d90a8fa commit bd7e374

1 file changed

Lines changed: 15 additions & 18 deletions

File tree

.github/workflows/cx-one-scan.yaml

Lines changed: 15 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -2,24 +2,21 @@ name: cx-one-scan
22
on:
33
workflow_dispatch:
44
pull_request:
5+
branches:
6+
- master
57
push:
68
branches:
7-
- main
8-
schedule:
9-
- cron: '00 5 * * *' # Every day at 05:00
10-
9+
- master
1110
jobs:
12-
cx-one-scan:
13-
name: cx-one-scan
14-
runs-on: ubuntu-latest
15-
steps:
16-
- name: Checkout
17-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
18-
- name: Checkmarx One CLI Action
19-
uses: checkmarx/ast-github-action@9fda4ab4c1b67c35de380552a972a82997d97731 # https://github.com/Checkmarx/ast-github-action/releases/tag/2.0.42
20-
with:
21-
base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }}
22-
cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }}
23-
cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
24-
cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
25-
additional_params: --scan-types sast,iac-security,sca --threshold "sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1"
11+
build:
12+
runs-on: ubuntu-latest
13+
steps:
14+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
15+
- name: Checkmarx One CLI Action
16+
uses: checkmarx/ast-github-action@9fda4ab4c1b67c35de380552a972a82997d97731 # v2.0.42
17+
with:
18+
base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }}
19+
cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }}
20+
cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
21+
cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
22+
additional_params: --scan-types sast,iac-security,sca --threshold "sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1"

0 commit comments

Comments
 (0)