Skip to content

Commit 2f81808

Browse files
committed
add wiz scan on create PR to 3.0.0 (SWG-14342)
1 parent 95e0f09 commit 2f81808

File tree

1 file changed

+13
-4
lines changed

1 file changed

+13
-4
lines changed

.github/workflows/maven-pr-3.0.yml

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -80,11 +80,20 @@ jobs:
8080
- name: Download Wiz CLI
8181
run: curl -o wizcli https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64 && chmod +x wizcli
8282

83-
- name: Scan Maven build directory with Wiz
84-
run: |
85-
./wizcli auth --id "$WIZ_CLIENT_ID" --secret "$WIZ_CLIENT_SECRET"
86-
./wizcli dir scan --path . --policy "$POLICY"
83+
- name: Authenticate to Wiz
84+
run: ./wizcli auth --id "$WIZ_CLIENT_ID" --secret "$WIZ_CLIENT_SECRET"
8785
env:
8886
WIZ_CLIENT_ID: ${{ secrets.WIZ_CLIENT_ID }}
8987
WIZ_CLIENT_SECRET: ${{ secrets.WIZ_CLIENT_SECRET }}
88+
89+
- name: Scan Maven build directory with Wiz
90+
run: |
91+
wizcli dir scan \
92+
--path . \
93+
--policy "$POLICY" \
94+
--tag repo="${{ github.repository }}" \
95+
--tag pr="${{ github.event.pull_request.number }}" \
96+
--tag commit="${{ github.sha }}" \
97+
--tag java="${{ matrix.java }}"
98+
env:
9099
POLICY: "SmartBear default vulnerabilities policy"

0 commit comments

Comments
 (0)