|
|
|
|
@ -29,7 +29,7 @@ jobs:
@@ -29,7 +29,7 @@ jobs:
|
|
|
|
|
ref: ${{ github.event.pull_request.head.sha }} |
|
|
|
|
|
|
|
|
|
- name: Scan with Checkmarx |
|
|
|
|
uses: checkmarx/ast-github-action@de327a92d7f419bfdc7c3e5535ad7b3bbce91677 # 2.0.38 |
|
|
|
|
uses: checkmarx/ast-github-action@b74e8d514feae4ad5ad2b43e72590935bd2daf5f # 2.0.39 |
|
|
|
|
env: |
|
|
|
|
INCREMENTAL: "${{ contains(github.event_name, 'pull_request') && '--sast-incremental' || '' }}" |
|
|
|
|
with: |
|
|
|
|
@ -44,7 +44,7 @@ jobs:
@@ -44,7 +44,7 @@ jobs:
|
|
|
|
|
--output-path . ${{ env.INCREMENTAL }} |
|
|
|
|
|
|
|
|
|
- name: Upload Checkmarx results to GitHub |
|
|
|
|
uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5 |
|
|
|
|
uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6 |
|
|
|
|
with: |
|
|
|
|
sarif_file: cx_result.sarif |
|
|
|
|
|
|
|
|
|
|