From 5a07fa4f7b9c5523e66ad6cb576635fe4d19518d Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 9 Aug 2021 15:25:16 -0400 Subject: [PATCH 1/4] Update ngsast.yml --- .github/workflows/ngsast.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ngsast.yml b/.github/workflows/ngsast.yml index 19fa330..57b98ca 100644 --- a/.github/workflows/ngsast.yml +++ b/.github/workflows/ngsast.yml @@ -38,7 +38,7 @@ jobs: id: extract_branch - name: NextGen Static Analysis # Run the analyzer and wait for it to finis, the app is a part of a group and we can dynamicaly capture the branch we're on for tagging. It's a java app and we point to where the binary can be found - run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-java-demo --tag app.group=HSL --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --java --cpg target/hello-shiftleft-*.jar + run: ${GITHUB_WORKSPACE}/sl analyze --wait --policy 776c9fdb-b8a9-4029-b41c-af4829368682/myNewAppDictionary:latest --app HelloShiftLeft--app shiftleft-java-demo --tag app.group=HSL --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --java --cpg target/hello-shiftleft-*.jar env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} SHIFTLEFT_ORG_ID: ${{ secrets.SHIFTLEFT_ORG_ID }} From 3a0f09054c45a47fff49672c19ff051900fbc205 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 9 Aug 2021 15:39:50 -0400 Subject: [PATCH 2/4] Update ngsast.yml --- .github/workflows/ngsast.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ngsast.yml b/.github/workflows/ngsast.yml index 57b98ca..7ea6aad 100644 --- a/.github/workflows/ngsast.yml +++ b/.github/workflows/ngsast.yml @@ -58,4 +58,5 @@ jobs: env: # For SL to run you'll need a Secret with an access token SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} - + +##adding a comment to force the PR From 6932df8844af623228b7058247e37205b5b6d6df Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 9 Aug 2021 15:47:41 -0400 Subject: [PATCH 3/4] Update ngsast.yml --- .github/workflows/ngsast.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ngsast.yml b/.github/workflows/ngsast.yml index 7ea6aad..077d2cc 100644 --- a/.github/workflows/ngsast.yml +++ b/.github/workflows/ngsast.yml @@ -38,7 +38,7 @@ jobs: id: extract_branch - name: NextGen Static Analysis # Run the analyzer and wait for it to finis, the app is a part of a group and we can dynamicaly capture the branch we're on for tagging. It's a java app and we point to where the binary can be found - run: ${GITHUB_WORKSPACE}/sl analyze --wait --policy 776c9fdb-b8a9-4029-b41c-af4829368682/myNewAppDictionary:latest --app HelloShiftLeft--app shiftleft-java-demo --tag app.group=HSL --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --java --cpg target/hello-shiftleft-*.jar + run: ${GITHUB_WORKSPACE}/sl analyze --wait --policy 776c9fdb-b8a9-4029-b41c-af4829368682/myNewmodifiedAppDictionary:latest:latest --app HelloShiftLeft--app shiftleft-java-demo --tag app.group=HSL --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --java --cpg target/hello-shiftleft-*.jar env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} SHIFTLEFT_ORG_ID: ${{ secrets.SHIFTLEFT_ORG_ID }} From c2609c161ea127ac30339fcc3fd180e4756297f2 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 9 Aug 2021 15:59:32 -0400 Subject: [PATCH 4/4] Update ngsast.yml --- .github/workflows/ngsast.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ngsast.yml b/.github/workflows/ngsast.yml index 077d2cc..343c60d 100644 --- a/.github/workflows/ngsast.yml +++ b/.github/workflows/ngsast.yml @@ -38,7 +38,7 @@ jobs: id: extract_branch - name: NextGen Static Analysis # Run the analyzer and wait for it to finis, the app is a part of a group and we can dynamicaly capture the branch we're on for tagging. It's a java app and we point to where the binary can be found - run: ${GITHUB_WORKSPACE}/sl analyze --wait --policy 776c9fdb-b8a9-4029-b41c-af4829368682/myNewmodifiedAppDictionary:latest:latest --app HelloShiftLeft--app shiftleft-java-demo --tag app.group=HSL --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --java --cpg target/hello-shiftleft-*.jar + run: ${GITHUB_WORKSPACE}/sl analyze --wait --policy 776c9fdb-b8a9-4029-b41c-af4829368682/myNewmodifiedAppDictionary:latest --app HelloShiftLeft--app shiftleft-java-demo --tag app.group=HSL --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --java --cpg target/hello-shiftleft-*.jar env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} SHIFTLEFT_ORG_ID: ${{ secrets.SHIFTLEFT_ORG_ID }}