From 40821624d064b4b557eb70d1c57de40171a756e1 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Fri, 30 Sep 2022 13:42:22 -0400 Subject: [PATCH 1/5] Add files via upload --- ngsast.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 ngsast.yaml diff --git a/ngsast.yaml b/ngsast.yaml new file mode 100644 index 0000000..44b74ee --- /dev/null +++ b/ngsast.yaml @@ -0,0 +1,11 @@ +ngsast: +- app: + name: helloshiftleft-spring-app + additional-findings: + - hsl-secrets + policy: io.shiftleft/helloshiftleft + language: JAVA +additional-findings: + hsl-secrets: + entropy: 0.5 + name: secrets From b969c7e76a8450a337fd566d5cb7ff0fc4cf7fa3 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Fri, 30 Sep 2022 13:51:19 -0400 Subject: [PATCH 2/5] Update shiftleft.yml --- shiftleft.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/shiftleft.yml b/shiftleft.yml index 94fb82c..ffd5585 100644 --- a/shiftleft.yml +++ b/shiftleft.yml @@ -8,7 +8,7 @@ build_rules: cvss_31_severity_ratings: - critical - high - threshold: 0 + threshold: 10 options: num_findings: 10 # Return 10 sast findings - id: "No reachable SCA findings" @@ -17,7 +17,7 @@ build_rules: cvss_31_severity_ratings: - critical - high - threshold: 0 + threshold: 10 options: reachable: true num_findings: 10 # Return 10 reachable sca findings @@ -27,6 +27,6 @@ build_rules: cvss_31_severity_ratings: - critical - high - threshold: 0 + threshold: 10 options: num_findings: 10 # Return 10 container findings From 7b9aec3a7ead3bf9268c5335d0f66d39bcaa6229 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Fri, 30 Sep 2022 14:22:02 -0400 Subject: [PATCH 3/5] Update ngsast.yaml --- ngsast.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ngsast.yaml b/ngsast.yaml index 44b74ee..14276b6 100644 --- a/ngsast.yaml +++ b/ngsast.yaml @@ -7,5 +7,5 @@ ngsast: language: JAVA additional-findings: hsl-secrets: - entropy: 0.5 + entropy: 1.0 name: secrets From c56fe07ea3b6f15c15b3b8d0536c5e7c3757c6e2 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 3 Oct 2022 10:12:40 -0400 Subject: [PATCH 4/5] Update ngsast.yaml --- ngsast.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ngsast.yaml b/ngsast.yaml index 14276b6..957dfab 100644 --- a/ngsast.yaml +++ b/ngsast.yaml @@ -1,6 +1,6 @@ ngsast: - app: - name: helloshiftleft-spring-app + name: shiftleft-java-demo additional-findings: - hsl-secrets policy: io.shiftleft/helloshiftleft From 41b9c90d208e24a6b3be75239f4acd40b7e8a3d3 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 3 Oct 2022 10:24:49 -0400 Subject: [PATCH 5/5] Update ngsast.yaml --- ngsast.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ngsast.yaml b/ngsast.yaml index 957dfab..68a9588 100644 --- a/ngsast.yaml +++ b/ngsast.yaml @@ -9,3 +9,6 @@ additional-findings: hsl-secrets: entropy: 1.0 name: secrets + include: + - "**/*.properties" + - src/**