|
| 1 | +# This workflow uses actions that are not certified by GitHub. They are provided by a third-party and are governed by |
| 2 | +# separate terms of service, privacy policy, and support documentation. |
| 3 | +# |
| 4 | +# Appknox: Leader in Mobile Application Security Testing Solutions <https://www.appknox.com/> |
| 5 | +# |
| 6 | +# To use this workflow, you must be an existing Appknox customer with GitHub Advanced Security (GHAS) enabled for your |
| 7 | +# repository. |
| 8 | +# |
| 9 | +# If you *are not* an existing customer, click here to contact us for licensing and pricing details: |
| 10 | +# <https://www.appknox.com/free-trial>. |
| 11 | +# |
| 12 | +# Instructions: |
| 13 | +# |
| 14 | +# 1. In your repository settings, navigate to 'Secrets' and click on 'New repository secret.' Name the |
| 15 | +# secret APPKNOX_ACCESS_TOKEN and paste your appknox user token into the value field. If you don't have a appknox token |
| 16 | +# or need to generate a new one for GitHub, visit the Appknox Platform, go to Account Settings->Developer Settings |
| 17 | +# and create a token labeled GitHub |
| 18 | +# |
| 19 | +# 2. Refer to the detailed workflow below, make any required adjustments, and then save it to your repository. After the |
| 20 | +# action executes, check the 'Security' tab for results |
| 21 | + |
| 22 | +name: Appknox |
| 23 | + |
| 24 | +on: |
| 25 | + push: |
| 26 | + branches: [ "main" ] |
| 27 | + pull_request: |
| 28 | + branches: [ "main" ] |
| 29 | +jobs: |
| 30 | + appknox: |
| 31 | + runs-on: ubuntu-latest |
| 32 | + steps: |
| 33 | + - name: Checkout Code |
| 34 | + uses: actions/checkout@v4 |
| 35 | + |
| 36 | + - name: Grant execute permission for gradlew |
| 37 | + run: chmod +x gradlew |
| 38 | + |
| 39 | + - name: Build the app |
| 40 | + run: ./gradlew build # Update this to build your Android or iOS application |
| 41 | + |
| 42 | + - name: Appknox GitHub action |
| 43 | + uses: appknox/appknox-github-action@b7d2bfb2321d5544e97bffcba48557234ab953a4 |
| 44 | + with: |
| 45 | + appknox_access_token: ${{ secrets.APPKNOX_ACCESS_TOKEN }} |
| 46 | + file_path: app/build/outputs/apk/debug/app-debug.apk # Specify the path to your .ipa or .apk here |
| 47 | + risk_threshold: MEDIUM # Update this to desired risk threshold [LOW, MEDIUM, HIGH, CRITICAL] |
| 48 | + sarif: Enable |
| 49 | + |
| 50 | + - name: Upload SARIF to GHAS |
| 51 | + if: always() |
| 52 | + uses: github/codeql-action/upload-sarif@v3 |
| 53 | + with: |
| 54 | + sarif_file: report.sarif |
0 commit comments