From 51ff32d67d9e43bff13870b83180880058311009 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 09:08:23 -0500 Subject: [PATCH 01/48] Setup action --- .github/workflows/smoke-tests.yaml | 24 +++++++++++++++++++ scanners/boostsecurityio/trivy-fs/module.yaml | 2 +- scanners/boostsecurityio/trivy-fs/test.yaml | 10 ++++++++ 3 files changed, 35 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/smoke-tests.yaml create mode 100644 scanners/boostsecurityio/trivy-fs/test.yaml diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml new file mode 100644 index 00000000..78b0b28b --- /dev/null +++ b/.github/workflows/smoke-tests.yaml @@ -0,0 +1,24 @@ +name: Smoke Tests +on: + pull_request: + types: [opened, synchronize, reopened] + paths: ['scanners/**'] +jobs: + scan_job: + name: Github Actions + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 # Need full history to detect changes + - name: Run Tests + uses: martin-boost-dev/boostsec-registry-test-action@main + with: + provider: github + provider-config: | + { + "token": "${{ secrets.GITHUB_TOKEN }}", + "owner": "martin-boost-dev", + "repo": "boostsec-registry-test-runner", + "workflow_id": "test-scanner.yml" + } diff --git a/scanners/boostsecurityio/trivy-fs/module.yaml b/scanners/boostsecurityio/trivy-fs/module.yaml index 90d21d71..9dc9a47b 100644 --- a/scanners/boostsecurityio/trivy-fs/module.yaml +++ b/scanners/boostsecurityio/trivy-fs/module.yaml @@ -1,5 +1,5 @@ api_version: 1.0 - +# Bump id: boostsecurityio/trivy-fs name: Trivy (Filesystem scanning) namespace: boostsecurityio/trivy-fs diff --git a/scanners/boostsecurityio/trivy-fs/test.yaml b/scanners/boostsecurityio/trivy-fs/test.yaml new file mode 100644 index 00000000..f481a9c7 --- /dev/null +++ b/scanners/boostsecurityio/trivy-fs/test.yaml @@ -0,0 +1,10 @@ +version: 1.0 +tests: + - name: "Source code scan" + type: "source-code" + source: + url: "https://github.com/martin-boost-dev/boost-poc-registry-testing-trivy" + ref: "main" + scan_paths: + - "rclone" + - "osv-scanner" From 75cbc8b97dac7e36bf7f593e5495711451f128c9 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 09:42:42 -0500 Subject: [PATCH 02/48] Use secret --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 78b0b28b..a0633c60 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -17,7 +17,7 @@ jobs: provider: github provider-config: | { - "token": "${{ secrets.GITHUB_TOKEN }}", + "token": "${{ secrets.BOOST_GITHUB_TEST_RUNNER }}", "owner": "martin-boost-dev", "repo": "boostsec-registry-test-runner", "workflow_id": "test-scanner.yml" From ae9461427bf2e04488522cd972c53052d7cea2ac Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 09:45:51 -0500 Subject: [PATCH 03/48] Add missing params --- .github/workflows/smoke-tests.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index a0633c60..2978c139 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -4,11 +4,12 @@ on: types: [opened, synchronize, reopened] paths: ['scanners/**'] jobs: - scan_job: + github-action: name: Github Actions runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - name: Checkout scanner registry + uses: actions/checkout@v4 with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests @@ -22,3 +23,6 @@ jobs: "repo": "boostsec-registry-test-runner", "workflow_id": "test-scanner.yml" } + registry-path: "." + base-ref: "main" + head-ref: "${{ github.head_ref }}" From 569bd0e5a9596357f3ac8598779fd83b006ffba8 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 13:21:13 -0500 Subject: [PATCH 04/48] trigger ci From 116185150e570e52ab28a0cbb2349d5e651f25c6 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 13:27:29 -0500 Subject: [PATCH 05/48] trigger ci From 3edaf8e70a2fb9e502fc9a887097e44b42cfa224 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 13:29:28 -0500 Subject: [PATCH 06/48] trigger ci From 1375a47c6c887ce06d19ed97870365c03d8b7b3b Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 13:31:07 -0500 Subject: [PATCH 07/48] Pin version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 2978c139..5501c8e0 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@main + uses: martin-boost-dev/boostsec-registry-test-action@c5b75a53e49a78055eb58fceb089e4d037a20fb3 with: provider: github provider-config: | From 98ef0975c6dfc538a4ed5bc51090b78f4ea15177 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 14:27:34 -0500 Subject: [PATCH 08/48] Update action version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 5501c8e0..4df0280a 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@c5b75a53e49a78055eb58fceb089e4d037a20fb3 + uses: martin-boost-dev/boostsec-registry-test-action@896d1c81789c873e881e3a7217fdc5426f2f023b with: provider: github provider-config: | From 4dd9e3978232483d79826e6470cb2b771eee12e2 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 14:40:30 -0500 Subject: [PATCH 09/48] Update action version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 4df0280a..8166f98b 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@896d1c81789c873e881e3a7217fdc5426f2f023b + uses: martin-boost-dev/boostsec-registry-test-action@c8224449e7ba8cf62250938904b57bcfa89626a7 with: provider: github provider-config: | From a8f9c514061774d2caf4c66b390e5fe51c3ebd0e Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 14:43:26 -0500 Subject: [PATCH 10/48] Rename file --- scanners/boostsecurityio/trivy-fs/{test.yaml => tests.yaml} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename scanners/boostsecurityio/trivy-fs/{test.yaml => tests.yaml} (100%) diff --git a/scanners/boostsecurityio/trivy-fs/test.yaml b/scanners/boostsecurityio/trivy-fs/tests.yaml similarity index 100% rename from scanners/boostsecurityio/trivy-fs/test.yaml rename to scanners/boostsecurityio/trivy-fs/tests.yaml From 70fd25f49e1b5fefa2eb187473e2162d2183ceee Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 14:53:18 -0500 Subject: [PATCH 11/48] Update version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 8166f98b..3247a4d5 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@c8224449e7ba8cf62250938904b57bcfa89626a7 + uses: martin-boost-dev/boostsec-registry-test-action@decc68f0f428aa27a74ca9d6300186f762487700 with: provider: github provider-config: | From 2857329d4c54699c2038bba09b4e599328559ba4 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 14:55:46 -0500 Subject: [PATCH 12/48] Fix test --- scanners/boostsecurityio/trivy-fs/tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scanners/boostsecurityio/trivy-fs/tests.yaml b/scanners/boostsecurityio/trivy-fs/tests.yaml index f481a9c7..18b62be0 100644 --- a/scanners/boostsecurityio/trivy-fs/tests.yaml +++ b/scanners/boostsecurityio/trivy-fs/tests.yaml @@ -1,4 +1,4 @@ -version: 1.0 +version: "1.0" tests: - name: "Source code scan" type: "source-code" From 9b2d0c585e9df013d216dd815bc2a777f60b2bf6 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 15:00:42 -0500 Subject: [PATCH 13/48] Update version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 3247a4d5..d9bf9cce 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@decc68f0f428aa27a74ca9d6300186f762487700 + uses: martin-boost-dev/boostsec-registry-test-action@b51057df7437a45a96fb6985c7b9da59e5f459f5 with: provider: github provider-config: | From b34bbe8dd28a64e88d15b41970c6b713043e6bbc Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 15:26:41 -0500 Subject: [PATCH 14/48] Update version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index d9bf9cce..6f91cab0 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@b51057df7437a45a96fb6985c7b9da59e5f459f5 + uses: martin-boost-dev/boostsec-registry-test-action@7f63a78ac904353c2b8047521a26244c05373869 with: provider: github provider-config: | From 5138c7c4c68b146e61df840478e8eee1f04e37bb Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 15:37:58 -0500 Subject: [PATCH 15/48] Update version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 6f91cab0..4e790a80 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7f63a78ac904353c2b8047521a26244c05373869 + uses: martin-boost-dev/boostsec-registry-test-action@38562d1be3a09b49c4497d5625f2bb16beebb457 with: provider: github provider-config: | From 24063ab95b19f833d89471b476a38f7f500ca996 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 10 Nov 2025 16:16:04 -0500 Subject: [PATCH 16/48] Update version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 4e790a80..c32786cf 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@38562d1be3a09b49c4497d5625f2bb16beebb457 + uses: martin-boost-dev/boostsec-registry-test-action@d6c1cb5fbc1947615cc5165e69f4a70689921f36 with: provider: github provider-config: | From fc96c61d1cb083532e6df338f57d25cc2c2b2825 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 09:13:25 -0500 Subject: [PATCH 17/48] Update version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index c32786cf..c139dcf8 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@d6c1cb5fbc1947615cc5165e69f4a70689921f36 + uses: martin-boost-dev/boostsec-registry-test-action@e3b6e1e25cfc573b2475217db89e40dc73a68255 with: provider: github provider-config: | From d715ed705b1168efb87e7fe7bde33124be5532ec Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 09:27:34 -0500 Subject: [PATCH 18/48] Update version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index c139dcf8..6fe7132f 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@e3b6e1e25cfc573b2475217db89e40dc73a68255 + uses: martin-boost-dev/boostsec-registry-test-action@2fe861851db9c121923d5aacb8e9121f7e655dff with: provider: github provider-config: | From 0d7b3d091ce4bea57ecb52dc87501646b5c150ed Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 11:07:59 -0500 Subject: [PATCH 19/48] Screw up the version --- scanners/boostsecurityio/trivy-fs/module.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scanners/boostsecurityio/trivy-fs/module.yaml b/scanners/boostsecurityio/trivy-fs/module.yaml index 9dc9a47b..aeda7579 100644 --- a/scanners/boostsecurityio/trivy-fs/module.yaml +++ b/scanners/boostsecurityio/trivy-fs/module.yaml @@ -119,7 +119,7 @@ steps: format: sarif post-processor: docker: - image: public.ecr.aws/boostsecurityio/boost-scanner-trivy:b990ceb@sha256:d4871661744790add629604c85b396458e54cec780ac881a5c3e4fa9fd1dde22 + image: public.ecr.aws/boostsecurityio/boost-scanner-trivy:b990ceb@sha256:xxx command: process environment: PYTHONIOENCODING: utf-8 From e85ea423129f967de2554dcd491fd31740f401f0 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 11:09:28 -0500 Subject: [PATCH 20/48] Fix the version --- scanners/boostsecurityio/trivy-fs/module.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scanners/boostsecurityio/trivy-fs/module.yaml b/scanners/boostsecurityio/trivy-fs/module.yaml index aeda7579..9dc9a47b 100644 --- a/scanners/boostsecurityio/trivy-fs/module.yaml +++ b/scanners/boostsecurityio/trivy-fs/module.yaml @@ -119,7 +119,7 @@ steps: format: sarif post-processor: docker: - image: public.ecr.aws/boostsecurityio/boost-scanner-trivy:b990ceb@sha256:xxx + image: public.ecr.aws/boostsecurityio/boost-scanner-trivy:b990ceb@sha256:d4871661744790add629604c85b396458e54cec780ac881a5c3e4fa9fd1dde22 command: process environment: PYTHONIOENCODING: utf-8 From 44ce319202708cd9178a3e68e4ba98241fd8d994 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 11:23:17 -0500 Subject: [PATCH 21/48] Update version --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 6fe7132f..645332e5 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2fe861851db9c121923d5aacb8e9121f7e655dff + uses: martin-boost-dev/boostsec-registry-test-action@87c750459ba4c3acae6093f6834b8142afea6012 with: provider: github provider-config: | From 796613c04273f6d371e5cb4a3a51045e4fe53258 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 11:29:40 -0500 Subject: [PATCH 22/48] Add another test --- scanners/boostsecurityio/trivy-sbom/tests.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 scanners/boostsecurityio/trivy-sbom/tests.yaml diff --git a/scanners/boostsecurityio/trivy-sbom/tests.yaml b/scanners/boostsecurityio/trivy-sbom/tests.yaml new file mode 100644 index 00000000..18b62be0 --- /dev/null +++ b/scanners/boostsecurityio/trivy-sbom/tests.yaml @@ -0,0 +1,10 @@ +version: "1.0" +tests: + - name: "Source code scan" + type: "source-code" + source: + url: "https://github.com/martin-boost-dev/boost-poc-registry-testing-trivy" + ref: "main" + scan_paths: + - "rclone" + - "osv-scanner" From 07cff5df0c920c23314af552dcb29e09177a368f Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 11:44:03 -0500 Subject: [PATCH 23/48] Update action --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 645332e5..3e6e4212 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@87c750459ba4c3acae6093f6834b8142afea6012 + uses: martin-boost-dev/boostsec-registry-test-action@f88fe99a215ef2a043d1cf45e8aa1d5301f34c95 with: provider: github provider-config: | From 0e3f7d61c68e397bd2fa23d6a80cf135527a0aab Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 12:59:40 -0500 Subject: [PATCH 24/48] Update action --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 3e6e4212..d11f7366 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -13,7 +13,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@f88fe99a215ef2a043d1cf45e8aa1d5301f34c95 + uses: martin-boost-dev/boostsec-registry-test-action@41b2fad6a60cb642c41f5901fb56037ef95f2d30 with: provider: github provider-config: | From 4c402a7f6c9411660ee6ef7c4474ba4b5cf7f427 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 14:39:35 -0500 Subject: [PATCH 25/48] Update version and add Gitlab --- .github/workflows/smoke-tests.yaml | 30 +++++++++++++++++++++++++++++- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index d11f7366..dddce870 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -1,8 +1,13 @@ name: Smoke Tests + +env: + ACTION: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 + on: pull_request: types: [opened, synchronize, reopened] paths: ['scanners/**'] + jobs: github-action: name: Github Actions @@ -13,7 +18,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@41b2fad6a60cb642c41f5901fb56037ef95f2d30 + uses: ${{ env.ACTION }} with: provider: github provider-config: | @@ -26,3 +31,26 @@ jobs: registry-path: "." base-ref: "main" head-ref: "${{ github.head_ref }}" + + gitlab-action: + name: Gitlab-ci + runs-on: ubuntu-latest + steps: + - name: Checkout scanner registry + uses: actions/checkout@v4 + with: + fetch-depth: 0 # Need full history to detect changes + - name: Run Tests + uses: ${{ env.ACTION }} + with: + provider: gitlab + provider-config: | + { + "token": "${{ secrets.BOOST_GITLAB_TEST_RUNNER }}", + "project_id": "boostsecurityio/martin/boostsec-registry-test-runner", + "repo": "boostsec-registry-test-runner", + "workflow_id": "test-scanner.yml" + } + registry-path: "." + base-ref: "main" + head-ref: "${{ github.head_ref }}" From f024c43c6f89d6a98117a2415e6cd39d96da0b43 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 14:48:25 -0500 Subject: [PATCH 26/48] Split action to reuse the version of the action to use between all jobs --- .github/workflows/smoke-test-runner.yaml | 29 +++++++++++ .github/workflows/smoke-tests.yaml | 61 +++++++----------------- 2 files changed, 47 insertions(+), 43 deletions(-) create mode 100644 .github/workflows/smoke-test-runner.yaml diff --git a/.github/workflows/smoke-test-runner.yaml b/.github/workflows/smoke-test-runner.yaml new file mode 100644 index 00000000..4c2cfc23 --- /dev/null +++ b/.github/workflows/smoke-test-runner.yaml @@ -0,0 +1,29 @@ +name: Smoke Test Runner (Reusable) + +on: + workflow_call: + inputs: + provider: + required: true + type: string + provider-config: + required: true + type: string + +jobs: + run-test: + name: Run Test (${{ inputs.provider }}) + runs-on: ubuntu-latest + steps: + - name: Checkout scanner registry + uses: actions/checkout@v4 + with: + fetch-depth: 0 + - name: Run Tests + uses: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 + with: + provider: ${{ inputs.provider }} + provider-config: ${{ inputs.provider-config }} + registry-path: "." + base-ref: "main" + head-ref: "${{ github.head_ref }}" diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index dddce870..885c46d8 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -1,8 +1,5 @@ name: Smoke Tests -env: - ACTION: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 - on: pull_request: types: [opened, synchronize, reopened] @@ -11,46 +8,24 @@ on: jobs: github-action: name: Github Actions - runs-on: ubuntu-latest - steps: - - name: Checkout scanner registry - uses: actions/checkout@v4 - with: - fetch-depth: 0 # Need full history to detect changes - - name: Run Tests - uses: ${{ env.ACTION }} - with: - provider: github - provider-config: | - { - "token": "${{ secrets.BOOST_GITHUB_TEST_RUNNER }}", - "owner": "martin-boost-dev", - "repo": "boostsec-registry-test-runner", - "workflow_id": "test-scanner.yml" - } - registry-path: "." - base-ref: "main" - head-ref: "${{ github.head_ref }}" + uses: ./.github/workflows/smoke-test-runner.yaml + with: + provider: github + provider-config: | + { + "token": "${{ secrets.BOOST_GITHUB_TEST_RUNNER }}", + "owner": "martin-boost-dev", + "repo": "boostsec-registry-test-runner", + "workflow_id": "test-scanner.yml" + } gitlab-action: name: Gitlab-ci - runs-on: ubuntu-latest - steps: - - name: Checkout scanner registry - uses: actions/checkout@v4 - with: - fetch-depth: 0 # Need full history to detect changes - - name: Run Tests - uses: ${{ env.ACTION }} - with: - provider: gitlab - provider-config: | - { - "token": "${{ secrets.BOOST_GITLAB_TEST_RUNNER }}", - "project_id": "boostsecurityio/martin/boostsec-registry-test-runner", - "repo": "boostsec-registry-test-runner", - "workflow_id": "test-scanner.yml" - } - registry-path: "." - base-ref: "main" - head-ref: "${{ github.head_ref }}" + uses: ./.github/workflows/smoke-test-runner.yaml + with: + provider: gitlab + provider-config: | + { + "token": "${{ secrets.BOOST_GITLAB_TEST_RUNNER }}", + "project_id": "boostsecurityio/martin/boostsec-registry-test-runner" + } From f06d95d88a052ef297599bb34f9213da76e44554 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 14:54:24 -0500 Subject: [PATCH 27/48] Revert "Split action to reuse the version of the action to use between all jobs" This reverts commit f024c43c6f89d6a98117a2415e6cd39d96da0b43. --- .github/workflows/smoke-test-runner.yaml | 29 ----------- .github/workflows/smoke-tests.yaml | 61 +++++++++++++++++------- 2 files changed, 43 insertions(+), 47 deletions(-) delete mode 100644 .github/workflows/smoke-test-runner.yaml diff --git a/.github/workflows/smoke-test-runner.yaml b/.github/workflows/smoke-test-runner.yaml deleted file mode 100644 index 4c2cfc23..00000000 --- a/.github/workflows/smoke-test-runner.yaml +++ /dev/null @@ -1,29 +0,0 @@ -name: Smoke Test Runner (Reusable) - -on: - workflow_call: - inputs: - provider: - required: true - type: string - provider-config: - required: true - type: string - -jobs: - run-test: - name: Run Test (${{ inputs.provider }}) - runs-on: ubuntu-latest - steps: - - name: Checkout scanner registry - uses: actions/checkout@v4 - with: - fetch-depth: 0 - - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 - with: - provider: ${{ inputs.provider }} - provider-config: ${{ inputs.provider-config }} - registry-path: "." - base-ref: "main" - head-ref: "${{ github.head_ref }}" diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 885c46d8..dddce870 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -1,5 +1,8 @@ name: Smoke Tests +env: + ACTION: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 + on: pull_request: types: [opened, synchronize, reopened] @@ -8,24 +11,46 @@ on: jobs: github-action: name: Github Actions - uses: ./.github/workflows/smoke-test-runner.yaml - with: - provider: github - provider-config: | - { - "token": "${{ secrets.BOOST_GITHUB_TEST_RUNNER }}", - "owner": "martin-boost-dev", - "repo": "boostsec-registry-test-runner", - "workflow_id": "test-scanner.yml" - } + runs-on: ubuntu-latest + steps: + - name: Checkout scanner registry + uses: actions/checkout@v4 + with: + fetch-depth: 0 # Need full history to detect changes + - name: Run Tests + uses: ${{ env.ACTION }} + with: + provider: github + provider-config: | + { + "token": "${{ secrets.BOOST_GITHUB_TEST_RUNNER }}", + "owner": "martin-boost-dev", + "repo": "boostsec-registry-test-runner", + "workflow_id": "test-scanner.yml" + } + registry-path: "." + base-ref: "main" + head-ref: "${{ github.head_ref }}" gitlab-action: name: Gitlab-ci - uses: ./.github/workflows/smoke-test-runner.yaml - with: - provider: gitlab - provider-config: | - { - "token": "${{ secrets.BOOST_GITLAB_TEST_RUNNER }}", - "project_id": "boostsecurityio/martin/boostsec-registry-test-runner" - } + runs-on: ubuntu-latest + steps: + - name: Checkout scanner registry + uses: actions/checkout@v4 + with: + fetch-depth: 0 # Need full history to detect changes + - name: Run Tests + uses: ${{ env.ACTION }} + with: + provider: gitlab + provider-config: | + { + "token": "${{ secrets.BOOST_GITLAB_TEST_RUNNER }}", + "project_id": "boostsecurityio/martin/boostsec-registry-test-runner", + "repo": "boostsec-registry-test-runner", + "workflow_id": "test-scanner.yml" + } + registry-path: "." + base-ref: "main" + head-ref: "${{ github.head_ref }}" From ef3b620a9ea59f781842eccfddd0a32155e9d352 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 14:54:58 -0500 Subject: [PATCH 28/48] Give up having one definition of the action --- .github/workflows/smoke-tests.yaml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index dddce870..fe5e6597 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -1,8 +1,5 @@ name: Smoke Tests -env: - ACTION: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 - on: pull_request: types: [opened, synchronize, reopened] @@ -18,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: ${{ env.ACTION }} + uses: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 with: provider: github provider-config: | @@ -41,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: ${{ env.ACTION }} + uses: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 with: provider: gitlab provider-config: | From 32dbeef5b000a3754c07fc6c5049623fd6754633 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 16:45:00 -0500 Subject: [PATCH 29/48] Update version --- .github/workflows/smoke-tests.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index fe5e6597..d7689fbf 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 + uses: martin-boost-dev/boostsec-registry-test-action@bf3c6905b6cd9a2be9e1062900204e8fa0bfd38f with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@ae4ca8bcb5d76bd0c14cef22aece7493da7ba423 + uses: martin-boost-dev/boostsec-registry-test-action@bf3c6905b6cd9a2be9e1062900204e8fa0bfd38f with: provider: gitlab provider-config: | From 472f1cc65c78d2b25f2db17043238da10eebeae0 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 11 Nov 2025 20:00:12 -0500 Subject: [PATCH 30/48] Update version --- .github/workflows/smoke-tests.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index d7689fbf..1aa9c93c 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@bf3c6905b6cd9a2be9e1062900204e8fa0bfd38f + uses: martin-boost-dev/boostsec-registry-test-action@b18321fba04a061be51914b443cbe9444c40d06f with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@bf3c6905b6cd9a2be9e1062900204e8fa0bfd38f + uses: martin-boost-dev/boostsec-registry-test-action@b18321fba04a061be51914b443cbe9444c40d06f with: provider: gitlab provider-config: | From 110fe436b748583c45788a451de3e9ed553797e4 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Wed, 12 Nov 2025 09:30:43 -0500 Subject: [PATCH 31/48] Update version + change gitlab secret --- .github/workflows/smoke-tests.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 1aa9c93c..c4e70d03 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@b18321fba04a061be51914b443cbe9444c40d06f + uses: martin-boost-dev/boostsec-registry-test-action@6672bea268cd8b0033be64e44628215c6a783e4c with: provider: github provider-config: | @@ -38,12 +38,12 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@b18321fba04a061be51914b443cbe9444c40d06f + uses: martin-boost-dev/boostsec-registry-test-action@6672bea268cd8b0033be64e44628215c6a783e4c with: provider: gitlab provider-config: | { - "token": "${{ secrets.BOOST_GITLAB_TEST_RUNNER }}", + "token": "${{ secrets.BOOST_GITLAB_PIPELINE_TRIGGER_TOKEN }}", "project_id": "boostsecurityio/martin/boostsec-registry-test-runner", "repo": "boostsec-registry-test-runner", "workflow_id": "test-scanner.yml" From 9ff5c6a7f6f1b0c42f96f635a3921836e4374baa Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Wed, 12 Nov 2025 10:04:08 -0500 Subject: [PATCH 32/48] Update version --- .github/workflows/smoke-tests.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index c4e70d03..6f9c8494 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@6672bea268cd8b0033be64e44628215c6a783e4c + uses: martin-boost-dev/boostsec-registry-test-action@57526914026866f168fae20933f672dbfa46f471 with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@6672bea268cd8b0033be64e44628215c6a783e4c + uses: martin-boost-dev/boostsec-registry-test-action@57526914026866f168fae20933f672dbfa46f471 with: provider: gitlab provider-config: | From 2309eff1870d5a923a6cba466e7e0968f370d4d1 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Wed, 12 Nov 2025 10:31:37 -0500 Subject: [PATCH 33/48] Update version + change gitlab secret --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 6f9c8494..0ac4879a 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -43,7 +43,7 @@ jobs: provider: gitlab provider-config: | { - "token": "${{ secrets.BOOST_GITLAB_PIPELINE_TRIGGER_TOKEN }}", + "token": "${{ secrets.BOOST_GITLAB_PROJECT_TOKEN }}", "project_id": "boostsecurityio/martin/boostsec-registry-test-runner", "repo": "boostsec-registry-test-runner", "workflow_id": "test-scanner.yml" From 063453187d42a2368c6169bc3743b040c2c3badf Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Wed, 12 Nov 2025 10:46:47 -0500 Subject: [PATCH 34/48] Update version --- .github/workflows/smoke-tests.yaml | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 0ac4879a..4cce2de6 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@57526914026866f168fae20933f672dbfa46f471 + uses: martin-boost-dev/boostsec-registry-test-action@df82403a273b294747554d33ed9b4253302be72c with: provider: github provider-config: | @@ -38,15 +38,13 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@57526914026866f168fae20933f672dbfa46f471 + uses: martin-boost-dev/boostsec-registry-test-action@df82403a273b294747554d33ed9b4253302be72c with: provider: gitlab provider-config: | { "token": "${{ secrets.BOOST_GITLAB_PROJECT_TOKEN }}", - "project_id": "boostsecurityio/martin/boostsec-registry-test-runner", - "repo": "boostsec-registry-test-runner", - "workflow_id": "test-scanner.yml" + "project_id": "boostsecurityio/martin/boostsec-registry-test-runner" } registry-path: "." base-ref: "main" From 5b35a60c42489074b0430b9b975164c1a825d772 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Wed, 12 Nov 2025 13:32:41 -0500 Subject: [PATCH 35/48] Add azure devops --- .github/workflows/smoke-tests.yaml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 4cce2de6..caacea0b 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -49,3 +49,26 @@ jobs: registry-path: "." base-ref: "main" head-ref: "${{ github.head_ref }}" + + azure-devops: + name: Azure DevOps + runs-on: ubuntu-latest + steps: + - name: Checkout scanner registry + uses: actions/checkout@v4 + with: + fetch-depth: 0 # Need full history to detect changes + - name: Run Tests + uses: martin-boost-dev/boostsec-registry-test-action@df82403a273b294747554d33ed9b4253302be72c + with: + provider: azure + provider-config: | + { + "token": "${{ secrets.BOOST_AZURE_DEVOPS_PAT }}", + "organization": "boostsecurityio", + "project": "Martin", + "pipeline_id": 51 + } + registry-path: "." + base-ref: "main" + head-ref: "${{ github.head_ref }}" From b29b1995f7324536ed5cdafd3684d5b8cb8f0c70 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Wed, 12 Nov 2025 13:52:46 -0500 Subject: [PATCH 36/48] Update version --- .github/workflows/smoke-tests.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index caacea0b..39fb5ee4 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@df82403a273b294747554d33ed9b4253302be72c + uses: martin-boost-dev/boostsec-registry-test-action@c97605f4009795b5311cfb6046f83ea5808c16ac with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@df82403a273b294747554d33ed9b4253302be72c + uses: martin-boost-dev/boostsec-registry-test-action@c97605f4009795b5311cfb6046f83ea5808c16ac with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@df82403a273b294747554d33ed9b4253302be72c + uses: martin-boost-dev/boostsec-registry-test-action@c97605f4009795b5311cfb6046f83ea5808c16ac with: provider: azure provider-config: | From b738b0c06989ec0403d3e9c0fbec1b84287d57a0 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Fri, 14 Nov 2025 10:00:22 -0500 Subject: [PATCH 37/48] ADD bitbucket --- .github/workflows/smoke-tests.yaml | 30 +++++++++++++++++++++++++++--- 1 file changed, 27 insertions(+), 3 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 39fb5ee4..c6e3af30 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@c97605f4009795b5311cfb6046f83ea5808c16ac + uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@c97605f4009795b5311cfb6046f83ea5808c16ac + uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@c97605f4009795b5311cfb6046f83ea5808c16ac + uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d with: provider: azure provider-config: | @@ -72,3 +72,27 @@ jobs: registry-path: "." base-ref: "main" head-ref: "${{ github.head_ref }}" + + bitbucket: + name: Bitbucket Pipelines + runs-on: ubuntu-latest + steps: + - name: Checkout scanner registry + uses: actions/checkout@v4 + with: + fetch-depth: 0 # Need full history to detect changes + - name: Run Tests + uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d + with: + provider: azure + provider-config: | + { + "username": "${{ secrets.BOOST_BITBUCKET_USERNAME }}", + "api_token": "${{ secrets.BOOST_BITBUCKET_API_TOKEN }}", + "workspace": "boostsecurityio", + "repo_slug": "boostsec-registry-test-runner", + "branch": "main" + } + registry-path: "." + base-ref: "main" + head-ref: "${{ github.head_ref }}" From 98b76e0e5e92f3cc3e2d7b41f63f88b3d48c02d4 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Fri, 14 Nov 2025 10:02:13 -0500 Subject: [PATCH 38/48] Use the right provider --- .github/workflows/smoke-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index c6e3af30..22e41584 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -84,7 +84,7 @@ jobs: - name: Run Tests uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d with: - provider: azure + provider: bitbucket provider-config: | { "username": "${{ secrets.BOOST_BITBUCKET_USERNAME }}", From 8be84653720ae8c85eb4e8fb328b5575086cabf3 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Fri, 14 Nov 2025 10:17:19 -0500 Subject: [PATCH 39/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 22e41584..4bf6221c 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d + uses: martin-boost-dev/boostsec-registry-test-action@7ae9f54a0e3b138bb34ec7b72bb3f5fd3f47ef55 with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d + uses: martin-boost-dev/boostsec-registry-test-action@7ae9f54a0e3b138bb34ec7b72bb3f5fd3f47ef55 with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d + uses: martin-boost-dev/boostsec-registry-test-action@7ae9f54a0e3b138bb34ec7b72bb3f5fd3f47ef55 with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@55087f599b0a78907e72d136a88534941a697d1d + uses: martin-boost-dev/boostsec-registry-test-action@7ae9f54a0e3b138bb34ec7b72bb3f5fd3f47ef55 with: provider: bitbucket provider-config: | From 2bb78433e3dbf7af10c4b3ace00975ac01f412bd Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Fri, 14 Nov 2025 13:02:38 -0500 Subject: [PATCH 40/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 4bf6221c..88b50c02 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7ae9f54a0e3b138bb34ec7b72bb3f5fd3f47ef55 + uses: martin-boost-dev/boostsec-registry-test-action@7ae9f540caa014cac5658c57e1ea8ed56af64b8b with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7ae9f54a0e3b138bb34ec7b72bb3f5fd3f47ef55 + uses: martin-boost-dev/boostsec-registry-test-action@7ae9f540caa014cac5658c57e1ea8ed56af64b8b with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7ae9f54a0e3b138bb34ec7b72bb3f5fd3f47ef55 + uses: martin-boost-dev/boostsec-registry-test-action@7ae9f540caa014cac5658c57e1ea8ed56af64b8b with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7ae9f54a0e3b138bb34ec7b72bb3f5fd3f47ef55 + uses: martin-boost-dev/boostsec-registry-test-action@7ae9f540caa014cac5658c57e1ea8ed56af64b8b with: provider: bitbucket provider-config: | From 8b4ad4798045f50459704d52ba14fd121a532dc0 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Fri, 14 Nov 2025 13:26:49 -0500 Subject: [PATCH 41/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 88b50c02..bb7d0c56 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7ae9f540caa014cac5658c57e1ea8ed56af64b8b + uses: martin-boost-dev/boostsec-registry-test-action@2eb400e3e507010af68031b67bfcec7e3bb43d3f with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7ae9f540caa014cac5658c57e1ea8ed56af64b8b + uses: martin-boost-dev/boostsec-registry-test-action@2eb400e3e507010af68031b67bfcec7e3bb43d3f with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7ae9f540caa014cac5658c57e1ea8ed56af64b8b + uses: martin-boost-dev/boostsec-registry-test-action@2eb400e3e507010af68031b67bfcec7e3bb43d3f with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@7ae9f540caa014cac5658c57e1ea8ed56af64b8b + uses: martin-boost-dev/boostsec-registry-test-action@2eb400e3e507010af68031b67bfcec7e3bb43d3f with: provider: bitbucket provider-config: | From b61f4c8c2d214867e16573c0f0890ea01621bf10 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 17 Nov 2025 16:45:59 -0500 Subject: [PATCH 42/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index bb7d0c56..7b80b8f0 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2eb400e3e507010af68031b67bfcec7e3bb43d3f + uses: martin-boost-dev/boostsec-registry-test-action@2411decf159ad637098e7c75c54d5bec995f666d with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2eb400e3e507010af68031b67bfcec7e3bb43d3f + uses: martin-boost-dev/boostsec-registry-test-action@2411decf159ad637098e7c75c54d5bec995f666d with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2eb400e3e507010af68031b67bfcec7e3bb43d3f + uses: martin-boost-dev/boostsec-registry-test-action@2411decf159ad637098e7c75c54d5bec995f666d with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2eb400e3e507010af68031b67bfcec7e3bb43d3f + uses: martin-boost-dev/boostsec-registry-test-action@2411decf159ad637098e7c75c54d5bec995f666d with: provider: bitbucket provider-config: | From e7f6cc7958c77221e22f2339e0e5095237d265be Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Mon, 17 Nov 2025 17:09:54 -0500 Subject: [PATCH 43/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 7b80b8f0..17febd63 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2411decf159ad637098e7c75c54d5bec995f666d + uses: martin-boost-dev/boostsec-registry-test-action@f624e775372674de7935d77a277e6695136dbae4 with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2411decf159ad637098e7c75c54d5bec995f666d + uses: martin-boost-dev/boostsec-registry-test-action@f624e775372674de7935d77a277e6695136dbae4 with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2411decf159ad637098e7c75c54d5bec995f666d + uses: martin-boost-dev/boostsec-registry-test-action@f624e775372674de7935d77a277e6695136dbae4 with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@2411decf159ad637098e7c75c54d5bec995f666d + uses: martin-boost-dev/boostsec-registry-test-action@f624e775372674de7935d77a277e6695136dbae4 with: provider: bitbucket provider-config: | From f5cacf5b6c1d3283d648f2ae7c2fa676772fe3f4 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 18 Nov 2025 09:01:23 -0500 Subject: [PATCH 44/48] Update version, direct download, add container image test --- .github/workflows/smoke-tests.yaml | 8 ++++---- scanners/boostsecurityio/trivy-fs/tests.yaml | 12 +++++++----- scanners/boostsecurityio/trivy-image/tests.yaml | 10 ++++++++++ 3 files changed, 21 insertions(+), 9 deletions(-) create mode 100644 scanners/boostsecurityio/trivy-image/tests.yaml diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 17febd63..f3c48a37 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@f624e775372674de7935d77a277e6695136dbae4 + uses: martin-boost-dev/boostsec-registry-test-action@0f00699e4cd4a7adee7d1cbe9b3d9c8c53171d07 with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@f624e775372674de7935d77a277e6695136dbae4 + uses: martin-boost-dev/boostsec-registry-test-action@0f00699e4cd4a7adee7d1cbe9b3d9c8c53171d07 with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@f624e775372674de7935d77a277e6695136dbae4 + uses: martin-boost-dev/boostsec-registry-test-action@0f00699e4cd4a7adee7d1cbe9b3d9c8c53171d07 with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@f624e775372674de7935d77a277e6695136dbae4 + uses: martin-boost-dev/boostsec-registry-test-action@0f00699e4cd4a7adee7d1cbe9b3d9c8c53171d07 with: provider: bitbucket provider-config: | diff --git a/scanners/boostsecurityio/trivy-fs/tests.yaml b/scanners/boostsecurityio/trivy-fs/tests.yaml index 18b62be0..d19c65d5 100644 --- a/scanners/boostsecurityio/trivy-fs/tests.yaml +++ b/scanners/boostsecurityio/trivy-fs/tests.yaml @@ -1,10 +1,12 @@ version: "1.0" tests: - - name: "Source code scan" + - name: "gitleaks" type: "source-code" source: - url: "https://github.com/martin-boost-dev/boost-poc-registry-testing-trivy" + url: "git@github.com:gitleaks/gitleaks.git" + ref: "v8.15.2" + - name: "osv-scanner" + type: "source-code" + source: + url: "git@github.com:google/osv-scanner.git" ref: "main" - scan_paths: - - "rclone" - - "osv-scanner" diff --git a/scanners/boostsecurityio/trivy-image/tests.yaml b/scanners/boostsecurityio/trivy-image/tests.yaml new file mode 100644 index 00000000..73e729ce --- /dev/null +++ b/scanners/boostsecurityio/trivy-image/tests.yaml @@ -0,0 +1,10 @@ +version: "1.0" +tests: + - name: "Image scanning" + type: "container-image" + source: + url: "https://github.com/martin-boost-dev/boost-poc-registry-testing-trivy" + ref: "main" + scan_paths: + - "rclone" + - "osv-scanner" From 7dfe4eb23b878d29490fefd0f0ca3be31e4a6cf9 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 18 Nov 2025 10:02:38 -0500 Subject: [PATCH 45/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index f3c48a37..ff82d078 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@0f00699e4cd4a7adee7d1cbe9b3d9c8c53171d07 + uses: martin-boost-dev/boostsec-registry-test-action@5baf4dfcd7d3c9f0c5d7c49e731207971aa88872 with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@0f00699e4cd4a7adee7d1cbe9b3d9c8c53171d07 + uses: martin-boost-dev/boostsec-registry-test-action@5baf4dfcd7d3c9f0c5d7c49e731207971aa88872 with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@0f00699e4cd4a7adee7d1cbe9b3d9c8c53171d07 + uses: martin-boost-dev/boostsec-registry-test-action@5baf4dfcd7d3c9f0c5d7c49e731207971aa88872 with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@0f00699e4cd4a7adee7d1cbe9b3d9c8c53171d07 + uses: martin-boost-dev/boostsec-registry-test-action@5baf4dfcd7d3c9f0c5d7c49e731207971aa88872 with: provider: bitbucket provider-config: | From adec25fa0aebe197881b79c9293efee8e141c167 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 18 Nov 2025 10:57:38 -0500 Subject: [PATCH 46/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index ff82d078..bbd46d40 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@5baf4dfcd7d3c9f0c5d7c49e731207971aa88872 + uses: martin-boost-dev/boostsec-registry-test-action@833b99ee14f45c6b5fe60ae0e90261bb87fc312a with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@5baf4dfcd7d3c9f0c5d7c49e731207971aa88872 + uses: martin-boost-dev/boostsec-registry-test-action@833b99ee14f45c6b5fe60ae0e90261bb87fc312a with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@5baf4dfcd7d3c9f0c5d7c49e731207971aa88872 + uses: martin-boost-dev/boostsec-registry-test-action@833b99ee14f45c6b5fe60ae0e90261bb87fc312a with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@5baf4dfcd7d3c9f0c5d7c49e731207971aa88872 + uses: martin-boost-dev/boostsec-registry-test-action@833b99ee14f45c6b5fe60ae0e90261bb87fc312a with: provider: bitbucket provider-config: | From b48f0a629ea3090dd4d72c6251d05d00b73a0d35 Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 18 Nov 2025 11:25:46 -0500 Subject: [PATCH 47/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index bbd46d40..8ca4b9c1 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@833b99ee14f45c6b5fe60ae0e90261bb87fc312a + uses: martin-boost-dev/boostsec-registry-test-action@e1ff73b273bad6143d9f86a32da40ac3e2cd3bf2 with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@833b99ee14f45c6b5fe60ae0e90261bb87fc312a + uses: martin-boost-dev/boostsec-registry-test-action@e1ff73b273bad6143d9f86a32da40ac3e2cd3bf2 with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@833b99ee14f45c6b5fe60ae0e90261bb87fc312a + uses: martin-boost-dev/boostsec-registry-test-action@e1ff73b273bad6143d9f86a32da40ac3e2cd3bf2 with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@833b99ee14f45c6b5fe60ae0e90261bb87fc312a + uses: martin-boost-dev/boostsec-registry-test-action@e1ff73b273bad6143d9f86a32da40ac3e2cd3bf2 with: provider: bitbucket provider-config: | From 96c510825fb22a7f324d4c5826e1436cd635812a Mon Sep 17 00:00:00 2001 From: Martin Roy Date: Tue, 18 Nov 2025 13:58:32 -0500 Subject: [PATCH 48/48] Update version --- .github/workflows/smoke-tests.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yaml b/.github/workflows/smoke-tests.yaml index 8ca4b9c1..2607e6a1 100644 --- a/.github/workflows/smoke-tests.yaml +++ b/.github/workflows/smoke-tests.yaml @@ -15,7 +15,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@e1ff73b273bad6143d9f86a32da40ac3e2cd3bf2 + uses: martin-boost-dev/boostsec-registry-test-action@987118ea9f07ca0225f2ad0df77da78ea498aec2 with: provider: github provider-config: | @@ -38,7 +38,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@e1ff73b273bad6143d9f86a32da40ac3e2cd3bf2 + uses: martin-boost-dev/boostsec-registry-test-action@987118ea9f07ca0225f2ad0df77da78ea498aec2 with: provider: gitlab provider-config: | @@ -59,7 +59,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@e1ff73b273bad6143d9f86a32da40ac3e2cd3bf2 + uses: martin-boost-dev/boostsec-registry-test-action@987118ea9f07ca0225f2ad0df77da78ea498aec2 with: provider: azure provider-config: | @@ -82,7 +82,7 @@ jobs: with: fetch-depth: 0 # Need full history to detect changes - name: Run Tests - uses: martin-boost-dev/boostsec-registry-test-action@e1ff73b273bad6143d9f86a32da40ac3e2cd3bf2 + uses: martin-boost-dev/boostsec-registry-test-action@987118ea9f07ca0225f2ad0df77da78ea498aec2 with: provider: bitbucket provider-config: |