From bfb6a4011b7a19419527041ab64c11c1c4bd2676 Mon Sep 17 00:00:00 2001 From: Lawrence Lucas Large <162439255+LukeLarge@users.noreply.github.com> Date: Tue, 9 Dec 2025 15:14:55 -0600 Subject: [PATCH 1/3] Add Codacy workflow configuration file --- .github/workflows/codacy.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/workflows/codacy.yml diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml new file mode 100644 index 00000000000..077bf0b6102 --- /dev/null +++ b/.github/workflows/codacy.yml @@ -0,0 +1,30 @@ + - name: defectdojo findings threshold + # You may pin to the exact commit or the version. + # uses: portswigger-cloud/defectdojo-findings-thresholds@d61c4c6fe732eded4828e76dd538098b48b7d245 + uses: portswigger-cloud/defectdojo-findings-thresholds@v1.0.1 + with: + # the url of your defectdojo instance + defectdojo-url: + # the username to login into your defectdojo instance + defectdojo-username: + # the password to login into your defectdojo instance + defectdojo-password: + # the defectdojo product that the scan result relates to + defectdojo-product: + # the file path for a client side certificate if required + client-certificate-file-path: # optional + # the file path for a client side private key if required + client-key-file-path: # optional + # total findings threshold + total-threshold: # optional, default is false + # critical findings threshold + critical-threshold: # optional, default is false + # high findings threshold + high-threshold: # optional, default is false + # medium findings threshold + medium-threshold: # optional, default is false + # low findings threshold + low-threshold: # optional, default is false + # info findings threshold + info-threshold: # optional, default is false + From 331e5f3abb76c1228deb81bdbe7788583cf15254 Mon Sep 17 00:00:00 2001 From: Lawrence Lucas Large <162439255+LukeLarge@users.noreply.github.com> Date: Tue, 9 Dec 2025 15:32:46 -0600 Subject: [PATCH 2/3] Update .github/workflows/codacy.yml Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- .github/workflows/codacy.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml index 077bf0b6102..fc682e81e69 100644 --- a/.github/workflows/codacy.yml +++ b/.github/workflows/codacy.yml @@ -4,13 +4,13 @@ uses: portswigger-cloud/defectdojo-findings-thresholds@v1.0.1 with: # the url of your defectdojo instance - defectdojo-url: + defectdojo-url: ${{ secrets.DEFECTDOJO_URL }} # the username to login into your defectdojo instance - defectdojo-username: + defectdojo-username: ${{ secrets.DEFECTDOJO_USERNAME }} # the password to login into your defectdojo instance - defectdojo-password: + defectdojo-password: ${{ secrets.DEFECTDOJO_PASSWORD }} # the defectdojo product that the scan result relates to - defectdojo-product: + defectdojo-product: 'your-product-name' # the file path for a client side certificate if required client-certificate-file-path: # optional # the file path for a client side private key if required From 01dd430c8577ffcf0ffcb45f29b0e6ebdfe21766 Mon Sep 17 00:00:00 2001 From: Lawrence Lucas Large <162439255+LukeLarge@users.noreply.github.com> Date: Tue, 9 Dec 2025 15:34:56 -0600 Subject: [PATCH 3/3] Update .github/workflows/codacy.yml Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- .github/workflows/codacy.yml | 65 +++++++++++++++++++----------------- 1 file changed, 35 insertions(+), 30 deletions(-) diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml index fc682e81e69..ce184f1b173 100644 --- a/.github/workflows/codacy.yml +++ b/.github/workflows/codacy.yml @@ -1,30 +1,35 @@ - - name: defectdojo findings threshold - # You may pin to the exact commit or the version. - # uses: portswigger-cloud/defectdojo-findings-thresholds@d61c4c6fe732eded4828e76dd538098b48b7d245 - uses: portswigger-cloud/defectdojo-findings-thresholds@v1.0.1 - with: - # the url of your defectdojo instance - defectdojo-url: ${{ secrets.DEFECTDOJO_URL }} - # the username to login into your defectdojo instance - defectdojo-username: ${{ secrets.DEFECTDOJO_USERNAME }} - # the password to login into your defectdojo instance - defectdojo-password: ${{ secrets.DEFECTDOJO_PASSWORD }} - # the defectdojo product that the scan result relates to - defectdojo-product: 'your-product-name' - # the file path for a client side certificate if required - client-certificate-file-path: # optional - # the file path for a client side private key if required - client-key-file-path: # optional - # total findings threshold - total-threshold: # optional, default is false - # critical findings threshold - critical-threshold: # optional, default is false - # high findings threshold - high-threshold: # optional, default is false - # medium findings threshold - medium-threshold: # optional, default is false - # low findings threshold - low-threshold: # optional, default is false - # info findings threshold - info-threshold: # optional, default is false - +name: DefectDojo Findings Threshold +on: [push, pull_request] +jobs: + check-findings: + runs-on: ubuntu-latest + steps: + - name: defectdojo findings threshold + # You may pin to the exact commit or the version. + # uses: portswigger-cloud/defectdojo-findings-thresholds@d61c4c6fe732eded4828e76dd538098b48b7d245 + uses: portswigger-cloud/defectdojo-findings-thresholds@v1.0.1 + with: + # the url of your defectdojo instance + defectdojo-url: + # the username to login into your defectdojo instance + defectdojo-username: + # the password to login into your defectdojo instance + defectdojo-password: + # the defectdojo product that the scan result relates to + defectdojo-product: + # the file path for a client side certificate if required + client-certificate-file-path: # optional + # the file path for a client side private key if required + client-key-file-path: # optional + # total findings threshold + total-threshold: # optional, default is false + # critical findings threshold + critical-threshold: # optional, default is false + # high findings threshold + high-threshold: # optional, default is false + # medium findings threshold + medium-threshold: # optional, default is false + # low findings threshold + low-threshold: # optional, default is false + # info findings threshold + info-threshold: # optional, default is false