From 352841b0e675a78b1428b192661d32c870a64342 Mon Sep 17 00:00:00 2001 From: junghanlee <73509756+junghanlee@users.noreply.github.com> Date: Wed, 24 Feb 2021 16:55:12 +0900 Subject: [PATCH] [SEC-001] SAST Secret Scan Result --- .github/workflows/sast_scan.yml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 .github/workflows/sast_scan.yml diff --git a/.github/workflows/sast_scan.yml b/.github/workflows/sast_scan.yml new file mode 100644 index 000000000..d9dd9fa3c --- /dev/null +++ b/.github/workflows/sast_scan.yml @@ -0,0 +1,23 @@ +name: SL Scan + +on: push + +jobs: + NextGen-Static-Analysis: + runs-on: ubuntu-20.04 + steps: + - uses: actions/checkout@v2 + - name: Perform Scan + uses: ShiftLeftSecurity/scan-action@master + env: + WORKSPACE: "" + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + SCAN_AUTO_BUILD: true + with: + output: reports + + - name: Upload report + uses: actions/upload-artifact@v2 + with: + name: shiftleft-scan-reports + path: reports