FazBrowse GitHub Viewer | Trending | | Home

Tools: [Download Repo ZIP] [View Raw Code] [Original HTTPS Page]

shiftleft-java-demo/.github/workflows/boost.yml at master · boost-entropy-java/shiftleft-java-demo · GitHub

81 lines (75 loc) · 2.12 KB

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

name: boostsecurity.io

on:

workflow_dispatch:

push:

branches:

- master

jobs:

boost-gitleaks:

name: gitleaks

runs-on: ubuntu-latest

steps:

- name: Checkout

uses: actions/checkout@v3

- name: Run gitleaks

uses: boostsecurityio/boostsec-scanner-github@v4

with:

api_token: ${{ secrets.BOOST_API_TOKEN }}

registry_module: boostsecurityio/gitleaks

boost-native:

name: Native Scanner

runs-on: ubuntu-latest

steps:

- name: Checkout

uses: actions/checkout@v3

- name: Run Native Scanner

uses: boostsecurityio/boostsec-scanner-github@v4

with:

api_token: ${{ secrets.BOOST_API_TOKEN }}

registry_module: boostsecurityio/scanner

boost-osv-scanner:

name: osv-scanner

runs-on: ubuntu-latest

steps:

- name: Checkout

uses: actions/checkout@v3

- name: Run osv-scanner

uses: boostsecurityio/boostsec-scanner-github@v4

with:

api_token: ${{ secrets.BOOST_API_TOKEN }}

registry_module: boostsecurityio/osv-scanner

boost-sbom:

name: SBOM

runs-on: ubuntu-latest

steps:

- name: Checkout

uses: actions/checkout@v3

- name: Run SBOM

uses: boostsecurityio/boostsec-scanner-github@v4

with:

api_token: ${{ secrets.BOOST_API_TOKEN }}

registry_module: boostsecurityio/trivy-sbom

boost-sca:

name: Trivy FS SCA

runs-on: ubuntu-latest

steps:

- name: Checkout

uses: actions/checkout@v3

- name: Run Trivy FS SCA

uses: boostsecurityio/boostsec-scanner-github@v4

with:

api_token: ${{ secrets.BOOST_API_TOKEN }}

registry_module: boostsecurityio/trivy-fs

boost-semgrep:

name: semgrep

runs-on: ubuntu-latest

steps:

- name: Checkout

uses: actions/checkout@v3

- name: Run semgrep

uses: boostsecurityio/boostsec-scanner-github@v4

with:

api_token: ${{ secrets.BOOST_API_TOKEN }}

registry_module: boostsecurityio/semgrep

env:

SEMGREP_RULES: p/ci

Back | FazBrowse Home | New Git URL