|
|
|
@ -39,7 +39,7 @@ jobs: |
|
|
|
with: |
|
|
|
with: |
|
|
|
ref: ${{ github.event.pull_request.head.sha }} |
|
|
|
ref: ${{ github.event.pull_request.head.sha }} |
|
|
|
|
|
|
|
|
|
|
|
- name: Azure Login |
|
|
|
- name: Log in to Azure |
|
|
|
id: azure-login |
|
|
|
id: azure-login |
|
|
|
uses: bitwarden/gh-actions/azure-login@main |
|
|
|
uses: bitwarden/gh-actions/azure-login@main |
|
|
|
with: |
|
|
|
with: |
|
|
|
@ -47,14 +47,14 @@ jobs: |
|
|
|
tenant_id: ${{ secrets.AZURE_TENANT_ID }} |
|
|
|
tenant_id: ${{ secrets.AZURE_TENANT_ID }} |
|
|
|
client_id: ${{ secrets.AZURE_CLIENT_ID }} |
|
|
|
client_id: ${{ secrets.AZURE_CLIENT_ID }} |
|
|
|
|
|
|
|
|
|
|
|
- name: Get KV secrets |
|
|
|
- name: Get Azure Key Vault Secrets |
|
|
|
id: get-kv-secrets |
|
|
|
id: get-kv-secrets |
|
|
|
uses: bitwarden/gh-actions/get-keyvault-secrets@main |
|
|
|
uses: bitwarden/gh-actions/get-keyvault-secrets@main |
|
|
|
with: |
|
|
|
with: |
|
|
|
keyvault: gh-org-bitwarden |
|
|
|
keyvault: gh-org-bitwarden |
|
|
|
secrets: "CHECKMARX-TENANT,CHECKMARX-CLIENT-ID,CHECKMARX-SECRET" |
|
|
|
secrets: "CHECKMARX-TENANT,CHECKMARX-CLIENT-ID,CHECKMARX-SECRET" |
|
|
|
|
|
|
|
|
|
|
|
- name: Azure Logout |
|
|
|
- name: Log out from Azure |
|
|
|
uses: bitwarden/gh-actions/azure-logout@main |
|
|
|
uses: bitwarden/gh-actions/azure-logout@main |
|
|
|
|
|
|
|
|
|
|
|
- name: Scan with Checkmarx |
|
|
|
- name: Scan with Checkmarx |
|
|
|
@ -107,7 +107,7 @@ jobs: |
|
|
|
- name: Install SonarCloud scanner |
|
|
|
- name: Install SonarCloud scanner |
|
|
|
run: dotnet tool install dotnet-sonarscanner -g |
|
|
|
run: dotnet tool install dotnet-sonarscanner -g |
|
|
|
|
|
|
|
|
|
|
|
- name: Azure Login |
|
|
|
- name: Log in to Azure |
|
|
|
id: azure-login |
|
|
|
id: azure-login |
|
|
|
uses: bitwarden/gh-actions/azure-login@main |
|
|
|
uses: bitwarden/gh-actions/azure-login@main |
|
|
|
with: |
|
|
|
with: |
|
|
|
@ -115,14 +115,14 @@ jobs: |
|
|
|
tenant_id: ${{ secrets.AZURE_TENANT_ID }} |
|
|
|
tenant_id: ${{ secrets.AZURE_TENANT_ID }} |
|
|
|
client_id: ${{ secrets.AZURE_CLIENT_ID }} |
|
|
|
client_id: ${{ secrets.AZURE_CLIENT_ID }} |
|
|
|
|
|
|
|
|
|
|
|
- name: Get KV secrets |
|
|
|
- name: Get Azure Key Vault Secrets |
|
|
|
id: get-kv-secrets |
|
|
|
id: get-kv-secrets |
|
|
|
uses: bitwarden/gh-actions/get-keyvault-secrets@main |
|
|
|
uses: bitwarden/gh-actions/get-keyvault-secrets@main |
|
|
|
with: |
|
|
|
with: |
|
|
|
keyvault: gh-org-bitwarden |
|
|
|
keyvault: gh-org-bitwarden |
|
|
|
secrets: "SONAR-TOKEN" |
|
|
|
secrets: "SONAR-TOKEN" |
|
|
|
|
|
|
|
|
|
|
|
- name: Azure Logout |
|
|
|
- name: Log out from Azure |
|
|
|
uses: bitwarden/gh-actions/azure-logout@main |
|
|
|
uses: bitwarden/gh-actions/azure-logout@main |
|
|
|
|
|
|
|
|
|
|
|
- name: Scan with SonarCloud |
|
|
|
- name: Scan with SonarCloud |
|
|
|
|