BenchmarkJava/.github/workflows/shiftleft.yml at master · BrandonSerpasTrace3/BenchmarkJava · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
name: Qwiet

on:
  pull_request:
  workflow_dispatch:
  push:

jobs:
  NextGen-Static-Analysis:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4
      with:
        fetch-depth: 0

    - name: Set up JDK 8
      uses: actions/setup-java@v4
      with:
        java-version: '8'
        distribution: 'zulu'

    - name: Run build
      run: mvn install; mvn clean package; echo "-- TARGET:"; ls -lah target

    - name: Download ShiftLeft CLI
      run: |
        java -version
        curl https://cdn.shiftleft.io/download/sl > ${GITHUB_WORKSPACE}/sl && chmod a+rx ${GITHUB_WORKSPACE}/sl
        tree

    - name: NextGen Static Analysis
      run: ${GITHUB_WORKSPACE}/sl analyze --verbose --force --wait --app BenchmarkJava --java --cpg target/*.war
      env:
        SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }}