From 9ef504cc9ec081320d754a8d66ea882beca28f6f Mon Sep 17 00:00:00 2001 From: CxSeanC <81707723+CxSeanC@users.noreply.github.com> Date: Thu, 30 Mar 2023 10:56:54 -0400 Subject: [PATCH 1/2] Update cx.yml --- .github/workflows/cx.yml | 33 +++++++++++++++++---------------- 1 file changed, 17 insertions(+), 16 deletions(-) diff --git a/.github/workflows/cx.yml b/.github/workflows/cx.yml index b807343..fddbac0 100644 --- a/.github/workflows/cx.yml +++ b/.github/workflows/cx.yml @@ -1,24 +1,25 @@ -name: cx +name: Checkmarx AST Scan on: + push: + branches: + - main + - master pull_request: + types: [opened, reopened, synchronize] #Types specify which pull request events will trigger the workflow. For more events refer Github Actions documentation. branches: - master -# push: + - master + jobs: - ast_scan: + build: runs-on: ubuntu-latest - name: Checkmarx scan run steps: - - name: Run scan - uses: CheckmarxDev/ast-github-action@more_engines - id: scan + - name: Checkout + uses: actions/checkout@v2 + - name: Checkmarx AST CLI Action + uses: checkmarx/ast-github-action@main #Github Action version with: - github_repo_token: ${{ secrets.GITHUB_TOKEN }} - ast_uri: ${{ secrets.AST_URI }} - ast_access_key_id: ${{ secrets.AST_ACCESS_KEY_ID }} - ast_access_key_secret: ${{ secrets.AST_ACCESS_KEY_SECRET }} - sca_user: ${{ secrets.SCA_USER }} - sca_password: ${{ secrets.SCA_PASSWORD }} - action_scan_complete_timeout_secs: 600 - high_results_threshold: 0 - medium_results_threshold: 10 + base_uri: https://ast.checkmarx.net/ + cx_tenant: ${{ secrets.CX_TENANT }} + cx_client_id: ${{ secrets.CX_CLIENT_ID }} + cx_client_secret: ${{ secrets.CX_CLIENT_SECRET }} From 74852b58059b3e817dda37bbaac5e96de72504c8 Mon Sep 17 00:00:00 2001 From: CxSeanC <81707723+CxSeanC@users.noreply.github.com> Date: Thu, 30 Mar 2023 10:57:41 -0400 Subject: [PATCH 2/2] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 80e96b0..56cdc9a 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,4 @@ +PR Test ![](https://github.com/CheckmarxDev/NodeGoat-test/workflows/cx/badge.svg) This is a "Vulnerable" Web Application developed by Cyber Security and Privacy Foundation(www.cysecurity.org). This app is intended for the Java Programmers and other people who wish to learn about Web application vulnerabilities and write secure code.123