Skip to content

Commit 2c1cd5e

Browse files
Add Appknox security testing workflow
This workflow integrates Appknox security testing into GitHub Actions for the main branch.
1 parent 8f9e540 commit 2c1cd5e

File tree

1 file changed

+54
-0
lines changed

1 file changed

+54
-0
lines changed

.github/workflows/appknox.yml

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
# This workflow uses actions that are not certified by GitHub. They are provided by a third-party and are governed by
2+
# separate terms of service, privacy policy, and support documentation.
3+
#
4+
# Appknox: Leader in Mobile Application Security Testing Solutions <https://www.appknox.com/>
5+
#
6+
# To use this workflow, you must be an existing Appknox customer with GitHub Advanced Security (GHAS) enabled for your
7+
# repository.
8+
#
9+
# If you *are not* an existing customer, click here to contact us for licensing and pricing details:
10+
# <https://www.appknox.com/free-trial>.
11+
#
12+
# Instructions:
13+
#
14+
# 1. In your repository settings, navigate to 'Secrets' and click on 'New repository secret.' Name the
15+
# secret APPKNOX_ACCESS_TOKEN and paste your appknox user token into the value field. If you don't have a appknox token
16+
# or need to generate a new one for GitHub, visit the Appknox Platform, go to Account Settings->Developer Settings
17+
# and create a token labeled GitHub
18+
#
19+
# 2. Refer to the detailed workflow below, make any required adjustments, and then save it to your repository. After the
20+
# action executes, check the 'Security' tab for results
21+
22+
name: Appknox
23+
24+
on:
25+
push:
26+
branches: [ "main" ]
27+
pull_request:
28+
branches: [ "main" ]
29+
jobs:
30+
appknox:
31+
runs-on: ubuntu-latest
32+
steps:
33+
- name: Checkout Code
34+
uses: actions/checkout@v4
35+
36+
- name: Grant execute permission for gradlew
37+
run: chmod +x gradlew
38+
39+
- name: Build the app
40+
run: ./gradlew build # Update this to build your Android or iOS application
41+
42+
- name: Appknox GitHub action
43+
uses: appknox/appknox-github-action@b7d2bfb2321d5544e97bffcba48557234ab953a4
44+
with:
45+
appknox_access_token: ${{ secrets.APPKNOX_ACCESS_TOKEN }}
46+
file_path: app/build/outputs/apk/debug/app-debug.apk # Specify the path to your .ipa or .apk here
47+
risk_threshold: MEDIUM # Update this to desired risk threshold [LOW, MEDIUM, HIGH, CRITICAL]
48+
sarif: Enable
49+
50+
- name: Upload SARIF to GHAS
51+
if: always()
52+
uses: github/codeql-action/upload-sarif@v3
53+
with:
54+
sarif_file: report.sarif

0 commit comments

Comments
 (0)