diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index bd9a5f4..4ed2776 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -38,7 +38,7 @@ jobs: id: extract_branch - name: NextGen Static Analysis # Run the analyzer and wait for it to finis, the app is a part of a group and we can dynamicaly capture the branch we're on for tagging. It's a java app and we point to where the binary can be found - run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-java-demo --tag app.group=HSL --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --java --cpg target/hello-shiftleft-*.jar + run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-java-demo --tag app.group=HSL --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --java --cpg --v2 target/hello-shiftleft-*.jar env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} SHIFTLEFT_ORG_ID: ${{ secrets.SHIFTLEFT_ORG_ID }} @@ -48,7 +48,7 @@ jobs: # Lets check the previous analysis for this branch to our baseline on Main, # since we specify a 'branch' we don't have to specify a '--source' run: | - ${GITHUB_WORKSPACE}/sl check-analysis --app shiftleft-java-demo \ + ${GITHUB_WORKSPACE}/sl check-analysis --app shiftleft-java-demo --v2 \ --branch "${{ github.head_ref || steps.extract_branch.outputs.branch }}" \ --report \ --github-pr-number=${{ github.event.number }} \