Update checkmarx.yml

itsKedar · Aug 6, 2024 · 9f3b897 · 9f3b897
1 parent ae1abc0
commit 9f3b897
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/.github/workflows/checkmarx.yml b/.github/workflows/checkmarx.yml
@@ -25,25 +25,23 @@ jobs:
     - uses: actions/checkout@v2
 
     - name: Checkmarx CxFlow Action
-      uses: itsKedar/checkmarx-cxflow-github-action@2947acac42e8c50e0984f9580c5f7fbedfaec25a
+      uses: checkmarx-ts/checkmarx-cxflow-github-action@v1.9
       env:
         #SCA_SCARESOLVERADDPARAMETERS_CUSTOM-PARAMETER : "--gradle-parameters=-Paws.codeartifact.username=${{ github.repository_owner }} -Paws.codeartifact.token=${{ github.repository_owner }}"
         #SCA_SCARESOLVERADDPARAMETERS_LOG-LEVEL : Debug
         JIRA_FIELDS_0_JIRA_DEFAULT_VALUE : APPSEC-2371
         JIRA_FIELDS_0_JIRA_FIELD_NAME : "Epic Link"
         JIRA_FIELDS_0_JIRA_FIELD_TYPE : text
         JIRA_FIELDS_0_TYPE : static
-        #CXFLOW_VERSION : github_action
+        PROJECT_CUSTOM_FIELDS : "test : kedar bhujade"
       with:
-        #cxflow_version: github_action
-        #java_opts: "itskedar/mycxflow:198173"
         project: ${{ github.repository }}-PR
         team: ${{ secrets.CHECKMARX_TEAMS }}
         checkmarx_url: ${{ secrets.CHECKMARX_URL }}
         checkmarx_username: ${{ secrets.CHECKMARX_USERNAME }}
         checkmarx_password: ${{ secrets.CHECKMARX_PASSWORD }}
         checkmarx_client_secret: ${{ secrets.CHECKMARX_CLIENT_SECRET }}
-        scanners: sca
+        scanners: sast
         incremental: false
         #extra_certificates: .
         break_build: true
@@ -64,4 +62,4 @@ jobs:
         jira_close_transition : 'Done'
         jira_open_status : 'Selected for Development,In Progress'
         jira_closed_status : 'Done'
-        params: '--sca.enable-sca-resolver=true --namespace=${{ github.repository_owner }} --checkmarx.settings-override=true --repo-name=${{ github.event.repository.name }} --branch=${{ github.ref_name }} --merge-id=${{ github.event.number }} --logging.level.com.checkmarx.*=DEBUG --cx-flow.filterSeverity --cx-flow.filterCategory'
+        params: '--project-custom-field=${{env.PROJECT_CUSTOM_FIELDS}} --namespace=${{ github.repository_owner }} --repo-name=${{ github.event.repository.name }} --branch=${{ github.ref_name }} --merge-id=${{ github.event.number }} --logging.level.com.checkmarx.*=DEBUG'