diff --git a/.github/workflows/checkmarx.yml b/.github/workflows/checkmarx.yml index dc4e194..6e78db0 100644 --- a/.github/workflows/checkmarx.yml +++ b/.github/workflows/checkmarx.yml @@ -25,7 +25,7 @@ jobs: - uses: actions/checkout@v2 - name: Checkmarx CxFlow Action - uses: itsKedar/checkmarx-cxflow-github-action@2947acac42e8c50e0984f9580c5f7fbedfaec25a + uses: checkmarx-ts/checkmarx-cxflow-github-action@v1.9 env: #SCA_SCARESOLVERADDPARAMETERS_CUSTOM-PARAMETER : "--gradle-parameters=-Paws.codeartifact.username=${{ github.repository_owner }} -Paws.codeartifact.token=${{ github.repository_owner }}" #SCA_SCARESOLVERADDPARAMETERS_LOG-LEVEL : Debug @@ -33,17 +33,15 @@ jobs: JIRA_FIELDS_0_JIRA_FIELD_NAME : "Epic Link" JIRA_FIELDS_0_JIRA_FIELD_TYPE : text JIRA_FIELDS_0_TYPE : static - #CXFLOW_VERSION : github_action + PROJECT_CUSTOM_FIELDS : "test : kedar bhujade" with: - #cxflow_version: github_action - #java_opts: "itskedar/mycxflow:198173" project: ${{ github.repository }}-PR team: ${{ secrets.CHECKMARX_TEAMS }} checkmarx_url: ${{ secrets.CHECKMARX_URL }} checkmarx_username: ${{ secrets.CHECKMARX_USERNAME }} checkmarx_password: ${{ secrets.CHECKMARX_PASSWORD }} checkmarx_client_secret: ${{ secrets.CHECKMARX_CLIENT_SECRET }} - scanners: sca + scanners: sast incremental: false #extra_certificates: . break_build: true @@ -64,4 +62,4 @@ jobs: jira_close_transition : 'Done' jira_open_status : 'Selected for Development,In Progress' jira_closed_status : 'Done' - params: '--sca.enable-sca-resolver=true --namespace=${{ github.repository_owner }} --checkmarx.settings-override=true --repo-name=${{ github.event.repository.name }} --branch=${{ github.ref_name }} --merge-id=${{ github.event.number }} --logging.level.com.checkmarx.*=DEBUG --cx-flow.filterSeverity --cx-flow.filterCategory' + params: '--project-custom-field=${{env.PROJECT_CUSTOM_FIELDS}} --namespace=${{ github.repository_owner }} --repo-name=${{ github.event.repository.name }} --branch=${{ github.ref_name }} --merge-id=${{ github.event.number }} --logging.level.com.checkmarx.*=DEBUG'