Skip to content

Commit 2d13274

Browse files
Added notification for Cx-One Scan
1 parent ecd4fed commit 2d13274

File tree

1 file changed

+22
-1
lines changed

1 file changed

+22
-1
lines changed

.github/workflows/checkmarx-one-scan.yml

Lines changed: 22 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,13 @@
11
name: Checkmarx One Scan
22

3-
on: [ pull_request, workflow_dispatch ]
3+
on:
4+
pull_request:
5+
workflow_dispatch:
6+
push:
7+
branches:
8+
- main
9+
schedule:
10+
- cron: '00 7 * * *' # Every day at 07:00
411

512
jobs:
613
cx-scan:
@@ -23,3 +30,17 @@ jobs:
2330
cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
2431
cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
2532
additional_params: --tags phoenix --file-include *.gradle,gradlew --threshold "sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1"
33+
notify:
34+
needs: cx-scan
35+
uses: Checkmarx/plugins-release-workflow/.github/workflows/cxone-scan-teams-notify.yml@38cf7ab29e5021bb817ac38bdae3ac0fb210608c
36+
if: always()
37+
with:
38+
cx_result: ${{ needs.cx-scan.result }}
39+
repository: ${{ github.repository }}
40+
ref_name: ${{ github.ref_name }}
41+
actor: ${{ github.actor }}
42+
event_name: ${{ github.event_name }}
43+
run_id: ${{ github.run_id }}
44+
server_url: ${{ github.server_url }}
45+
secrets:
46+
teams_webhook_url: ${{ secrets.CXONE_SCAN_WEBHOOK_URL }}

0 commit comments

Comments
 (0)