freemium-ui 1.0.300 → 1.0.301
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
# Remove any comment lines that are not necessary
|
|
2
|
+
|
|
3
|
+
name: Wasp (Semgrep) - SAST Check
|
|
4
|
+
|
|
5
|
+
on:
|
|
6
|
+
pull_request_target:
|
|
7
|
+
branches:
|
|
8
|
+
- "master" # This will be the default branch of a repo
|
|
9
|
+
schedule:
|
|
10
|
+
- cron: '0 */24 * * *' # Run everyday at 12 AM UTC
|
|
11
|
+
workflow_dispatch: # Run on demand
|
|
12
|
+
|
|
13
|
+
jobs:
|
|
14
|
+
wasp-scan:
|
|
15
|
+
name: Wasp scan
|
|
16
|
+
runs-on: ["self-hosted", "Linux", "fw-shared"]
|
|
17
|
+
steps:
|
|
18
|
+
- name: Repository checkout
|
|
19
|
+
uses: actions/checkout@v3
|
|
20
|
+
|
|
21
|
+
- name: Running Wasp scan
|
|
22
|
+
uses: freshactions/wasp@latest
|
|
23
|
+
env:
|
|
24
|
+
# Remove any of the following environment variables if you don't want to use them.
|
|
25
|
+
WASP_LOG_LEVEL: DEBUG
|
|
26
|
+
WASP_SAVE_JSON: true
|
|
27
|
+
WASP_SAVE_HTML: true
|
|
28
|
+
WASP_SAVE_CSV: true
|
|
29
|
+
WASP_FRESHRELEASE_PR_PROJECT_KEY: "FRM"
|
|
30
|
+
# Dry run will not raise any tickets. Remove this if you don't want to run in dry run mode.
|
|
31
|
+
|
|
32
|
+
WASP_DRY_RUN: ${{ vars.SECURITY_APPSEC_WASP_DRY_RUN }}
|
|
33
|
+
|
|
34
|
+
WASP_FRESHRELEASE_URL: ${{ vars.SECURITY_APPSEC_FRESHRELEASE_URL }}
|
|
35
|
+
WASP_FRESHRELEASE_PR_ISSUE_TYPE: ${{ vars.SECURITY_APPSEC_FRESHRELEASE_PR_ISSUE_TYPE }}
|
|
36
|
+
|
|
37
|
+
WASP_PULSE_URL: ${{ secrets.WASP_PULSE_URL }}
|
|
38
|
+
WASP_TOKEN: ${{ secrets.SECURITY_APPSEC_WASP_TOKEN }}
|
|
39
|
+
WASP_FRESHRELEASE_TOKEN: ${{ secrets.SECURITY_APPSEC_FRESHRELEASE_TOKEN }}
|
|
40
|
+
WASP_SLACK_TOKEN: ${{ secrets.SECURITY_APPSEC_SLACK_TOKEN }}
|
|
41
|
+
GITHUB_TOKEN: ${{ secrets.SECURITY_APPSEC_GH_TOKEN }}
|
|
42
|
+
|
|
43
|
+
# Use this step to upload the scan report as an artifact.
|
|
44
|
+
- uses: actions/upload-artifact@v3
|
|
45
|
+
if: always()
|
|
46
|
+
with:
|
|
47
|
+
name: Wasp scan report archive
|
|
48
|
+
retention-days: 90
|
|
49
|
+
path: |
|
|
50
|
+
wasp-report.csv
|
|
51
|
+
wasp-report.json
|
|
52
|
+
wasp-report.html
|