Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .github/workflows/ast-scan.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ on:

jobs:
cx-scan:
name: Checkmarx One Scan
runs-on: ubuntu-latest
steps:
- name: Checkout
Expand All @@ -21,4 +22,4 @@ jobs:
cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }}
cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
additional_params: --tags phoenix --threshold "sca-high=1; sca-medium=1; sca-low=1; sast-high=1;sast-medium=1;sast-low=1; iac-security-high=1; iac-security-medium=1; iac-security-low=1"
additional_params: --tags sypher --threshold "sca-high=1; sca-medium=1; sca-low=1; sast-high=1;sast-medium=1;sast-low=1; iac-security-high=1; iac-security-medium=1; iac-security-low=1"
2 changes: 1 addition & 1 deletion .github/workflows/pr-automation.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,4 +19,4 @@ jobs:
GH_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
PRNUM: ${{ github.event.pull_request.number }}
PRAUTHOR: ${{ github.event.pull_request.user.login }}
run: gh pr edit $PRNUM --add-reviewer Checkmarx/cx-anurag-dalke
run: gh pr edit $PRNUM --add-reviewer cx-anurag-dalke
32 changes: 32 additions & 0 deletions .github/workflows/pr-linter.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
name: PR Linter

on:
pull_request:
types: [opened, edited, reopened]

jobs:
lint:
name: PR Linter
runs-on: ubuntu-latest
steps:
- name: Check PR Title and Branch
run: |
PR_TITLE="${{ github.event.pull_request.title }}"
PR_BRANCH="${{ github.head_ref }}"

if ! [[ "$PR_TITLE" =~ ^[A-Z][a-zA-Z0-9]* ]]; then
echo "::error::PR title must be in CamelCase. Please update the title."
exit 1
fi

if ! [[ "$PR_TITLE" =~ \(AST-[0-9]+\)$ || "$PR_TITLE" =~ \(AST-[0-9]+(, AST-[0-9]+)*\)$ ]]; then
echo "::error::PR title must contain a Jira ticket ID at the end in the format '(AST-XXXX)'."
exit 1
fi

if ! [[ "$PR_BRANCH" =~ ^(bug|fix|feature|other)/ ]]; then
echo "::error::Branch name must start with 'bug/' or 'feature/' or 'other/'."
exit 1
fi

shell: bash
6 changes: 6 additions & 0 deletions CODEOWNERS
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
# Code ownership rules

# Each line is a file pattern followed by one or more owners

# Specify the default owners for the entire repository
* @cx-anurag-dalke @cx-atish-jadhav @cx-anand-nandeshwar
Loading