Skip to content

Commit ee39acb

Browse files
Update Checkmarx scan workflow with new triggers
Added push trigger and scheduled execution for Checkmarx scan.
1 parent 43cb001 commit ee39acb

1 file changed

Lines changed: 24 additions & 2 deletions

File tree

.github/workflows/ast-scan.yml

Lines changed: 24 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,12 @@
11
name: Checkmarx One Scan
2-
3-
on: [ pull_request, workflow_dispatch ]
2+
on:
3+
workflow_dispatch:
4+
pull_request:
5+
push:
6+
branches:
7+
- main
8+
schedule:
9+
- cron: '00 7 * * *' # Every day at 07:00
410

511
jobs:
612
cx-scan:
@@ -16,3 +22,19 @@ jobs:
1622
cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
1723
cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
1824
additional_params: --tags phoenix --file-filter !checkmarx-ast-eclipse-plugin-tests/ --threshold "sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1;sca-critical=1;sca-high=1;sca-medium=1;sca-low=1"
25+
26+
27+
notify:
28+
needs: cx-scan
29+
uses: Checkmarx/plugins-release-workflow/.github/workflows/cxone-scan-teams-notify.yml@38cf7ab29e5021bb817ac38bdae3ac0fb210608c
30+
if: always()
31+
with:
32+
cx_result: ${{ needs.cx-scan.result }}
33+
repository: ${{ github.repository }}
34+
ref_name: ${{ github.ref_name }}
35+
actor: ${{ github.actor }}
36+
event_name: ${{ github.event_name }}
37+
run_id: ${{ github.run_id }}
38+
server_url: ${{ github.server_url }}
39+
secrets:
40+
teams_webhook_url: ${{ secrets.CXONE_SCAN_WEBHOOK_URL }}

0 commit comments

Comments
 (0)