add wiz scan to the pipeline (SWG-14342)

Author: ewaostrowska

.github/workflows/maven-master-pulls.yml

@@ -58,3 +58,37 @@ jobs:
             ${{ runner.os }}-maven-
       - name: Build with Maven
         run: mvn -B -U clean verify -DskipTests -Dmaven.test.skip=true -Dmaven.site.skip=true -Dmaven.javadoc.skip=true -Psamples-java8 --file pom.xml
+
+  scan-with-wiz:
+        name: Trigger Wiz Scanning
+        runs-on: ubuntu-latest
+
+        needs: [ build ]
+        if: success()
+
+        steps:
+        - name: Login to Docker Hub
+          uses: docker/login-action@v2
+          with:
+            username: ${{ secrets.DOCKERHUB_SB_USERNAME }}
+            password: ${{ secrets.DOCKERHUB_SB_PASSWORD }}
+
+        - name: Download Wiz CLI
+          run: curl -o wizcli https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64 && chmod +x wizcli
+
+        - name: Authenticate to Wiz
+          run: ./wizcli auth --id "$WIZ_CLIENT_ID" --secret "$WIZ_CLIENT_SECRET"
+          env:
+            WIZ_CLIENT_ID: ${{ secrets.WIZ_CLIENT_ID }}
+            WIZ_CLIENT_SECRET: ${{ secrets.WIZ_CLIENT_SECRET }}
+
+        - name: Pull Docker image for scanning
+          run: docker pull swaggerapi/swagger-codegen-cli:latest
+
+        - name: Run wiz-cli docker image scan
+          run: |
+            ./wizcli docker scan --image $TAG --policy "$POLICY"
+            ./wizcli docker tag --image $TAG
+          env:
+            TAG: swaggerapi/swagger-codegen-cli:latest
+            POLICY: "SmartBear default vulnerabilities policy"