diff --git a/.github/workflows/one-scan.yml b/.github/workflows/one-scan.yml index 9a48e5d22..7a1e1bc14 100644 --- a/.github/workflows/one-scan.yml +++ b/.github/workflows/one-scan.yml @@ -12,14 +12,26 @@ jobs: cx-scan: name: Checkmarx One Scan runs-on: ubuntu-latest + container: + image: node:18 + volumes: + - /var/run/docker.sock:/var/run/docker.sock steps: - name: Checkout uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - name: Log in to JFrog Container Registry + run: echo ${{ secrets.JFROG_TOKEN }} | docker login checkmarx.jfrog.io -u elchanan.arbiv@checkmarx.com --password-stdin + + + - name: Run docker Pull checkmarx.jfrog.io/ast-docker/chainguard/go-fips + run: docker pull checkmarx.jfrog.io/ast-docker/chainguard/go-fips:1.22.9-r0@sha256:632691ef054759e5702ba90777046498573340b65e1c9ccac0285b0ccb71775e + - name: Checkmarx One CLI Action uses: checkmarx/ast-github-action@f0869bd1a37fddc06499a096101e6c900e815d81 # v.2.0.36 + with: base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }} cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }} cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }} cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }} - additional_params: --tags phoenix --threshold "sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1" \ No newline at end of file + additional_params: --debug --tags phoenix --threshold "sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1" \ No newline at end of file diff --git a/Dockerfile b/Dockerfile index 4e3b1ded6..e0255dff8 100644 --- a/Dockerfile +++ b/Dockerfile @@ -5,4 +5,3 @@ COPY cx /app/bin/cx ENTRYPOINT ["/app/bin/cx"] -HEALTHCHECK NONE diff --git a/test/integration/data/Dockerfile b/test/integration/data/Dockerfile index 210f972d7..46e44773e 100644 --- a/test/integration/data/Dockerfile +++ b/test/integration/data/Dockerfile @@ -1,6 +1,7 @@ # Example: docker build . -t dsvw && docker run -p 65412:65412 dsvw -FROM alpine:3.15.4 +FROM checkmarx.jfrog.io/ast-docker/containers-triage:0.1.0 + RUN apk --no-cache add git python3 py-lxml \ && rm -rf /var/cache/apk/*