From ca643d74e77c93d7851494f331886a11311a7742 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 13 Dec 2021 11:34:14 -0500 Subject: [PATCH 1/3] Update shiftleft-inspect.yml --- .github/workflows/shiftleft-inspect.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/shiftleft-inspect.yml b/.github/workflows/shiftleft-inspect.yml index 77036c6..14b3ae5 100644 --- a/.github/workflows/shiftleft-inspect.yml +++ b/.github/workflows/shiftleft-inspect.yml @@ -20,7 +20,7 @@ jobs: run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})" id: extract_branch - name: NextGen Static Analysis - run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-python-example --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python --cpg . + run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-python-example --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python . env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} Build-Rules: From 9d0e392eb5631e4c7d9692a287d3937d0879b188 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 13 Dec 2021 11:47:41 -0500 Subject: [PATCH 2/3] Update shiftleft-inspect.yml --- .github/workflows/shiftleft-inspect.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/shiftleft-inspect.yml b/.github/workflows/shiftleft-inspect.yml index 14b3ae5..77036c6 100644 --- a/.github/workflows/shiftleft-inspect.yml +++ b/.github/workflows/shiftleft-inspect.yml @@ -20,7 +20,7 @@ jobs: run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})" id: extract_branch - name: NextGen Static Analysis - run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-python-example --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python . + run: ${GITHUB_WORKSPACE}/sl analyze --wait --app shiftleft-python-example --tag branch=${{ github.head_ref || steps.extract_branch.outputs.branch }} --python --cpg . env: SHIFTLEFT_ACCESS_TOKEN: ${{ secrets.SHIFTLEFT_ACCESS_TOKEN }} Build-Rules: From 1d5705bca14cde00c1070189084ae2939f22586a Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 13 Dec 2021 16:15:41 -0500 Subject: [PATCH 3/3] Add files via upload --- suppress-xss.yml | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 suppress-xss.yml diff --git a/suppress-xss.yml b/suppress-xss.yml new file mode 100644 index 0000000..0833778 --- /dev/null +++ b/suppress-xss.yml @@ -0,0 +1,3 @@ +# Example analysis remediation config +methods: + - pattern: XSS1 \ No newline at end of file