Update soos-sca-dast-scan.yml #26
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow uses actions that are not certified by GitHub. | |
| # They are provided by a third-party and are governed by | |
| # separate terms of service, privacy policy, and support | |
| # documentation. | |
| # | |
| # SOOS is the easy-to-integrate and affordable software security solution for your whole team. | |
| # | |
| # Learn more at https://soos.io/ | |
| # | |
| # To use this action, perform the following steps: | |
| # | |
| # 1. Create an account on https://app.soos.io. SOOS offers a free 30 day trial for our SCA, DAST, and SBOM products. | |
| # | |
| # 2. Navigate to the "Integrate" page in the SOOS app (https://app.soos.io/integrate/dast/). Note the "API Credentials" section of this page; the keys you will need for the next step are here. | |
| # | |
| # 3. Set up your SOOS API Key and SOOS Client Id as Github Secrets named SOOS_API_KEY and SOOS_CLIENT_ID. | |
| # | |
| # 4. (Optional) If you'd like to upload SARIF results of DAST scans to GitHub, set SOOS_GITHUB_PAT with your Github Personal Access Token. | |
| # | |
| # Check for the latest version here: https://github.com/marketplace/actions/soos-dast | |
| name: "SOOS DAST Scan" | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| jobs: | |
| soos-sca-analysis: | |
| name: SOOS SCA Scan | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@master | |
| - name: Run SOOS - Scan for vulnerabilities | |
| uses: soos-io/soos-sca-github-action@v2 # Get Latest Version from https://github.com/marketplace/actions/soos-core-sca | |
| with: | |
| project_name: "SCA+DAST+SAST Github Actions Test" | |
| client_id: ${{ secrets.QA_SOOS_CLIENT_ID }} | |
| api_key: ${{ secrets.QA_SOOS_API_KEY }} | |
| api_url: "https://qa-api.soos.io/api/" | |
| #directories_to_exclude: 'image-resizer/**' | |
| #branch_name: "integration" | |
| soos: | |
| name: SOOS DAST Analysis | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Run SOOS DAST Analysis | |
| uses: soos-io/soos-dast-github-action@v2 | |
| with: | |
| client_id: ${{ secrets.QA_SOOS_CLIENT_ID }} | |
| api_key: ${{ secrets.QA_SOOS_API_KEY }} | |
| api_url: "https://qa-api.soos.io/api/" | |
| project_name: "SCA+DAST+SAST Github Actions Test" | |
| scan_mode: "baseline" | |
| target_url: "https://brokencrystals.com/" | |
| #branch_name: "integration" | |
| soos_sast_analysis_example: | |
| name: SOOS SAST Analysis Example | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@master | |
| - name: Run SOOS SAST Analysis | |
| uses: soos-io/soos-sast-github-action@v1 # GET Latest Version from https://github.com/marketplace/actions/soos-sast | |
| with: | |
| client_id: ${{ secrets.QA_SOOS_CLIENT_ID }} | |
| api_key: ${{ secrets.QA_SOOS_API_KEY }} | |
| api_url: "https://qa-api.soos.io/api/" | |
| project_name: "SCA+DAST+SAST Github Actions Test" | |
| #directories_to_exclude: "sarif/**" | |
| #files_to_exclude: "image_resizer_semgrep_output.sarif.json, sastNoIssues_semgrep_output.sarif.json" | |
| #branch_name: "integration" | |
| #build_version: '1.0.0' | |
| #log_level: 'WARN' |