FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
shiftleft-java-demo/.github/workflows/shiftleft.yml at master · note/shiftleft-java-demo · GitHub
note
/
shiftleft-java-demo
Public
forked from
ShiftLeftSecurity/shiftleft-java-demo
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
2
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Expand file tree
Breadcrumbs
shiftleft-java-demo
/
.github
/
workflows
/
shiftleft.yml
Copy path
View runs
More file actions
More file actions
Latest commit
History
History
History
59 lines (54 loc) · 2.15 KB
Breadcrumbs
shiftleft-java-demo
/
.github
/
workflows
/
shiftleft.yml
Copy path
File metadata and controls
59 lines (54 loc) · 2.15 KB
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
---
#
This workflow integrates ShiftLeft NG SAST with GitHub
#
Visit https://docs.shiftleft.io for help
name
:
ShiftLeft
on
:
pull_request
:
workflow_dispatch
:
jobs
:
NextGen-Static-Analysis
:
runs-on
:
ubuntu-latest
steps
:
-
uses
:
actions/checkout@v2
#
We are building this application with Java 11
-
name
:
Setup Java JDK
uses
:
actions/setup-java@v1.4.3
with
:
java-version
:
11.0.x
-
name
:
Package with maven
run
:
mvn compile package
-
name
:
Download ShiftLeft CLI
run
:
|
curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl
#
ShiftLeft requires Java 1.8. Post the package step override the version
-
name
:
Setup Java JDK
uses
:
actions/setup-java@v1.4.3
with
:
java-version
:
1.8
-
name
:
Extract branch name
shell
:
bash
run
:
echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})"
id
:
extract_branch
-
name
:
NextGen Static Analysis
run
:
${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-java-demo --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --vcs-prefix-correction "io/shiftleft=src/main/java/" --java --cpg target/hello-shiftleft-0.0.1.jar
env
:
SHIFTLEFT_ACCESS_TOKEN
:
${{ secrets.SHIFTLEFT_ACCESS_TOKEN }}
Build-Rules
:
runs-on
:
ubuntu-latest
needs
:
NextGen-Static-Analysis
steps
:
-
uses
:
actions/checkout@v2
-
name
:
Download ShiftLeft CLI
run
:
|
curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl
-
name
:
Validate Build Rules
run
:
|
${GITHUB_WORKSPACE}/sl check-analysis --app shiftleft-java-demo \
--branch "${{ github.head_ref || steps.extract_branch.outputs.branch }}" \
--report \
--github-pr-number=${{github.event.number}} \
--github-pr-user=${{ github.repository_owner }} \
--github-pr-repo=${{ github.event.repository.name }} \
--github-token=${{ secrets.GITHUB_TOKEN }}
env
:
SHIFTLEFT_ACCESS_TOKEN
:
${{ secrets.SHIFTLEFT_ACCESS_TOKEN }}
Back
|
FazBrowse Home
|
New Git URL