CxSeanOrg · cx-sean-carroll · Oct 7, 2020 · Apr 30, 2021 · Apr 30, 2021 · Apr 30, 2021
diff --git a/.github/workflows/cx.yml b/.github/workflows/cx.yml
@@ -1,24 +1,26 @@
 name: cx
+
 on:
   pull_request:
     branches:
       - master
-#  push:
+    types: [closed]
+
 jobs:
   ast_scan:
+    if: github.event.pull_request.merged == true
     runs-on: ubuntu-latest
     name: Checkmarx scan run
+
     steps:
-      - name: Run scan
-        uses: CheckmarxDev/ast-github-action@more_engines
-        id: scan
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Checkmarx AST CLI Action
+        uses: checkmarx/ast-github-action@main
         with:
-          github_repo_token: ${{ secrets.GITHUB_TOKEN }}
-          ast_uri: ${{ secrets.AST_URI }}
-          ast_access_key_id: ${{ secrets.AST_ACCESS_KEY_ID }}
-          ast_access_key_secret: ${{ secrets.AST_ACCESS_KEY_SECRET }}
-          sca_user: ${{ secrets.SCA_USER }}
-          sca_password: ${{ secrets.SCA_PASSWORD }}
-          action_scan_complete_timeout_secs: 600
-          high_results_threshold: 0
-          medium_results_threshold: 10
+          base_uri: https://ast.checkmarx.net/
+          cx_tenant: workshop
+          cx_client_id: ${{ secrets.CX_CLIENT_ID }}
+          cx_client_secret: ${{ secrets.CX_CLIENT_SECRET }}
+          additional_params: '' # Specify any additional parameters you need here
diff --git a/README.md b/README.md
@@ -1,7 +1,3 @@
-![](https://github.com/CheckmarxDev/NodeGoat-test/workflows/cx/badge.svg)
-
-This is a "Vulnerable" Web Application developed by Cyber Security and Privacy Foundation(www.cysecurity.org). This app is intended for the Java Programmers and other people who wish to learn about Web application vulnerabilities and write secure code.123
-
 **The full course content is now available on Github for free:**
 
 https://github.com/CSPF-Founder/JavaSecurityCourse

diff --git a/azure-pipelines.yml b/azure-pipelines.yml
@@ -0,0 +1,28 @@
+# Starter pipeline
+# Start with a minimal pipeline that you can customize to build and deploy your code.
+# Add steps that build, run tests, deploy, and more:
+# https://aka.ms/yaml
+
+trigger:
+- master
+
+pool:
+  vmImage: ubuntu-latest
+
+steps:
+- script: echo Hello, world!
+  displayName: 'Run a one-line script'
+
+- script: |
+    echo Add other tasks to build, test, and deploy your project.
+    echo See https://aka.ms/yaml
+  displayName: 'Run a multi-line script'
+- task: Application security testing@2021
+  inputs:
+    projectName: 'SC_JVL_ADO'
+    enableProxy: false
+    enableSastScan: true
+    CheckmarxService: 'CxSAST'
+    fullTeamName: 'ADO'
+    incScan: false
+    enableDependencyScan: false
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/AddPage.class b/target/classes/org/cysecurity/cspf/jvl/controller/AddPage.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Cl.class b/target/classes/org/cysecurity/cspf/jvl/controller/Cl.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/DoLogic.class b/target/classes/org/cysecurity/cspf/jvl/controller/DoLogic.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/EmailCheck.class b/target/classes/org/cysecurity/cspf/jvl/controller/EmailCheck.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/ForwardMe.class b/target/classes/org/cysecurity/cspf/jvl/controller/ForwardMe.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Install.class b/target/classes/org/cysecurity/cspf/jvl/controller/Install.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/LoginValidator.class b/target/classes/org/cysecurity/cspf/jvl/controller/LoginValidator.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Logout.class b/target/classes/org/cysecurity/cspf/jvl/controller/Logout.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/MyHandler.class b/target/classes/org/cysecurity/cspf/jvl/controller/MyHandler.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Open.class b/target/classes/org/cysecurity/cspf/jvl/controller/Open.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Register.class b/target/classes/org/cysecurity/cspf/jvl/controller/Register.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/SendMessage.class b/target/classes/org/cysecurity/cspf/jvl/controller/SendMessage.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/UploadObject.class b/target/classes/org/cysecurity/cspf/jvl/controller/UploadObject.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/UsernameCheck.class b/target/classes/org/cysecurity/cspf/jvl/controller/UsernameCheck.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/XPathQuery.class b/target/classes/org/cysecurity/cspf/jvl/controller/XPathQuery.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/xxe.class b/target/classes/org/cysecurity/cspf/jvl/controller/xxe.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/model/DBConnect.class b/target/classes/org/cysecurity/cspf/jvl/model/DBConnect.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/model/HashMe.class b/target/classes/org/cysecurity/cspf/jvl/model/HashMe.class
diff --git a/target/classes/org/cysecurity/cspf/jvl/model/orm/Users.class b/target/classes/org/cysecurity/cspf/jvl/model/orm/Users.class
diff --git a/testtest.txt b/testtest.txt
@@ -0,0 +1,3 @@
+#test
+#test
+#test
-Original file line number
+Diff line change
@@ -0,0 +1,3 @@
+    #test
+    #test
+    #test