You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -29,19 +29,28 @@ NOTE - to understand possible values for the action input `flags`, run the Secur
29
29
30
30
`$ bloodhound-cli code --help`
31
31
32
-
## Create your SecureStack API Key and save as GitHub Secret
32
+
ADDITIONAL NOTE - Make sure you change the `language: node` to whatever language is in your repo. SecureStack supports 4 types currently: `node`, `yarn`, `python`and `go`. To learn more run the SecureStack CLI locally:
33
33
34
-
1. Log in to [SecureStack](https://app.securestack.com) and go to the Profile -> GENERATE KEY screen.
35
-
2. Generate an API key and copy the value.
36
-
3. Go to Settings for your GitHub repository and click on Secrets at the bottom left.
37
-
4. Create a new secret named SECURESTACK_API_KEY_SECRET and paste the value from step 2 into the field.
34
+
`$ bloodhound-cli code -t --help`
35
+
36
+
## Create your SecureStack API Key as GitHub Secret
37
+
38
+
1. Create a [SecureStack](https://app.securestack.com) account using your GitHub credentials. You get 20 scans for free and you don't need to add a credit card.
39
+
2. Once you are logged in go to "Profile" in the black drawer on the left, and then -> GENERATE KEY tab.
40
+
3. Generate an API key and copy the value.
41
+
4. Go to Settings for your GitHub repository and click on Secrets -> Actions at the bottom left.
42
+
5. Create a new secret named SECURESTACK_API_KEY and paste the value from step 2 into the field.
38
43
39
44
## Retreiving your SecureStack Application ID
40
45
41
46
1. Log in to [SecureStack](https://app.securestack.com).
42
-
2. Open the application you wish to analyse.
47
+
2. Open the application you wish to analyse. If you haven't created a managed application you can follow the directions in this [VIDEO](https://youtu.be/mapgawLMVKg) to create one.
43
48
3. Copy the value of the application id on the View Application screen.
44
-
4. Paste into the value of the `securestack_app_id` action input for the step using the SecureStack action in your workflow.
49
+
4. Go to Settings for your GitHub repository and click on Secrets -> Actions at the bottom left.
50
+
5. Create a new secret named SECURESTACK_APP_ID and paste the value from step 3 into the field.
51
+
52
+
## Watch this video to learn how to setup your first GitHub Action with SecureStack
53
+
[](http://www.youtube.com/watch?v=0sYXsCmY2es"Video Title")
45
54
46
55
## What types of issues does this GitHub Action find?
47
56
1. Vulnerable third party libraries from place like NPM, PyPi, and Go repositories
@@ -54,5 +63,10 @@ NOTE - to understand possible values for the action input `flags`, run the Secur
54
63
3. For Go: go.dep or go.mod
55
64
4. For Python: requirements.txt
56
65
66
+
## Check out our other GitHub Actions:
67
+
1.[SecureStack Secrets Analysis](https://github.com/marketplace/actions/securestack-secrets-analysis) - Scan your application for embedded api keys, credentials and senstive data.
68
+
2.[SecureStack Web Vulnerability & Cloud Misconfiguration Analysis](https://github.com/marketplace/actions/securestack-application-composition-analysis) - Scan your running application url for cloud misconfigurations and web vulnerabilities.
69
+
3.[SecureStack Log4j Analysis](https://github.com/marketplace/actions/securestack-log4j-vulnerability-analysis) - Scan your application for Log4j/Log4Shell vulnerabilities.
70
+
57
71
Made with 💜 by [SecureStack](https://securestack.com)
0 commit comments