Back merge (#31)

sunil-lakshman · abhinav-from-contentstack · aravindbuilt · web-flow · commit 2b8aa62a9b50 · 2024-09-26T14:37:52.000+05:30
* Next (#25) * Fixed snyk issues and added auto publish package support in github action. (#18) * Fixed snyk issues and added auto publish package support in github ac… (#20) * Fixed snyk issues and added auto publish package support in github action. * Added security file and updated license * Updated changelog file message * Updated python version in github action file * Updated pip and pylint * Feat/cs 44004 json rte nested list fragment (#21) * Fixed snyk issues and added auto publish package support in github ac… (#19) * Fixed snyk issues and added auto publish package support in github action. (#18) * Fixed snyk issues and added auto publish package support in github ac… (#20) * Fixed snyk issues and added auto publish package support in github action. * Added security file and updated license * Updated changelog file message * Updated python version in github action file * Updated pip and pylint * Added fragment style attribute in JSON RTE nested list Updated License file. * Fix/cs 44004 changed host name (#23) * Added fragment style attribute in JSON RTE nested list Updated License file. * Changed dev url to prod url * Feat/cs 44495 added reference support (#24) * Next (#22) * Fixed snyk issues and added auto publish package support in github action. (#18) * Fixed snyk issues and added auto publish package support in github ac… (#20) * Fixed snyk issues and added auto publish package support in github action. * Added security file and updated license * Updated changelog file message * Updated python version in github action file * Updated pip and pylint * Feat/cs 44004 json rte nested list fragment (#21) * Fixed snyk issues and added auto publish package support in github ac… (#19) * Fixed snyk issues and added auto publish package support in github action. (#18) * Fixed snyk issues and added auto publish package support in github ac… (#20) * Fixed snyk issues and added auto publish package support in github action. * Added security file and updated license * Updated changelog file message * Updated python version in github action file * Updated pip and pylint * Added fragment style attribute in JSON RTE nested list Updated License file. * Fix/cs 44004 changed host name (#23) * Added fragment style attribute in JSON RTE nested list Updated License file. * Changed dev url to prod url * Added reference support and fixed package build issues * Next (#22) (#27) * Fixed snyk issues and added auto publish package support in github action. (#18) * Fixed snyk issues and added auto publish package support in github ac… (#20) * Fixed snyk issues and added auto publish package support in github action. * Added security file and updated license * Updated changelog file message * Updated python version in github action file * Updated pip and pylint * Feat/cs 44004 json rte nested list fragment (#21) * Fixed snyk issues and added auto publish package support in github ac… (#19) * Fixed snyk issues and added auto publish package support in github action. (#18) * Fixed snyk issues and added auto publish package support in github ac… (#20) * Fixed snyk issues and added auto publish package support in github action. * Added security file and updated license * Updated changelog file message * Updated python version in github action file * Updated pip and pylint * Added fragment style attribute in JSON RTE nested list Updated License file. * Fix/cs 44004 changed host name (#23) * Added fragment style attribute in JSON RTE nested list Updated License file. * Changed dev url to prod url --------- Co-authored-by: Abhinav Gupta <abhinav.gupta@contentstack.com> Co-authored-by: abhinav <63039365+abhinav-from-contentstack@users.noreply.github.com> * sca-scan.yml * jira.yml * sast-scan.yml * codeql-analysis.yml --------- Co-authored-by: Abhinav Gupta <abhinav.gupta@contentstack.com> Co-authored-by: abhinav <63039365+abhinav-from-contentstack@users.noreply.github.com> Co-authored-by: Aravind Kumar <aravind.kumar@contentstack.com>
diff --git a/.github/workflows/jira.yml b/.github/workflows/jira.yml
@@ -3,7 +3,7 @@ on:
   pull_request:
     types: [opened]
 jobs:
-  security:
+  security-jira:
     if: ${{ github.actor == 'dependabot[bot]' || github.actor == 'snyk-bot' || contains(github.event.pull_request.head.ref, 'snyk-fix-')  || contains(github.event.pull_request.head.ref, 'snyk-upgrade-')}}
     runs-on: ubuntu-latest
     steps:
@@ -26,3 +26,8 @@ jobs:
             PR: ${{ github.event.pull_request.html_url }}
 
           fields: "${{ secrets.JIRA_FIELDS }}"
+      - name: Transition issue
+        uses: atlassian/gajira-transition@v3
+        with:
+          issue: ${{ steps.create.outputs.issue }}
+          transition: ${{ secrets.JIRA_TRANSITION }}
diff --git a/.github/workflows/sast-scan.yml b/.github/workflows/sast-scan.yml
@@ -0,0 +1,11 @@
+name: SAST Scan
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+jobs:
+  security-sast:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Semgrep Scan
+        run: docker run -v /var/run/docker.sock:/var/run/docker.sock -v "${PWD}:/src" returntocorp/semgrep semgrep scan --config auto
diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml
@@ -3,13 +3,13 @@ on:
   pull_request:
     types: [opened, synchronize, reopened]
 jobs:
-  security:
+  security-sca:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master
       - name: Run Snyk to check for vulnerabilities
-        uses: snyk/actions/python-3.10@master
+        uses: snyk/actions/python@master
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         with:
-          args: --fail-on=all
+          args: --fail-on=all --all-projects --skip-unresolved
