Skip to content
Closed
Show file tree
Hide file tree
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .github/workflows/ast-scan.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ on:

jobs:
cx-scan:
name: Checkmarx One Scan
runs-on: ubuntu-latest
steps:
- name: Checkout
Expand All @@ -21,4 +22,4 @@ jobs:
cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }}
cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
additional_params: --tags phoenix --threshold "sca-high=1; sca-medium=1; sca-low=1; sast-high=1;sast-medium=1;sast-low=1; iac-security-high=1; iac-security-medium=1; iac-security-low=1"
additional_params: --tags sypher --threshold "sca-high=1; sca-medium=1; sca-low=1; sast-high=1;sast-medium=1;sast-low=1; iac-security-high=1; iac-security-medium=1; iac-security-low=1"
31 changes: 31 additions & 0 deletions .github/workflows/pr-linter.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
name: PR Linter

on:
pull_request:
types: [opened, edited]

jobs:
lint:
runs-on: ubuntu-latest
steps:
- name: Check PR Title and Branch
run: |
PR_TITLE="${{ github.event.pull_request.title }}"
PR_BRANCH="${{ github.head_ref }}"

if ! [[ "$PR_TITLE" =~ ^[A-Z][a-zA-Z0-9]* ]]; then
echo "::error::PR title must be in CamelCase. Please update the title."
exit 1
fi

if ! [[ "$PR_TITLE" =~ \(AST-[0-9]+\)$ || "$PR_TITLE" =~ \(AST-[0-9]+(, AST-[0-9]+)*\)$ ]]; then
echo "::error::PR title must contain a Jira ticket ID at the end in the format '(AST-XXXX)'."
exit 1
fi

if ! [[ "$PR_BRANCH" =~ ^(bug|fix|feature|other)/ ]]; then
echo "::error::Branch name must start with 'bug/' or 'feature/' or 'other/'."
exit 1
fi

shell: bash
6 changes: 6 additions & 0 deletions CODEOWNERS
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
# Code ownership rules

# Each line is a file pattern followed by one or more owners

# Specify the default owners for the entire repository
* @cx-anurag-dalke @cx-atish-jadhav @cx-anand-nandeshwar
Loading