Skip to content
Security Scan

Create main.yml #2

Sign in to view logs

Create main.yml

Create main.yml #2

Workflow file for this run

.github/workflows/main.yml at fc96351
name: Security Scan
on:
push:
branches:
- main
jobs:
scan:
name: Run CxAST cli
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2
- name: Checkmarx AST CLI Action
uses: checkmarx/ast-github-action@main
with:
cx_apikey: ${{ secrets.cx_apikey }}
additional_params: --report-format sonar
- name: Sonar CLI Action
uses: sonarsource/sonarqube-scan-action@master
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
args: >
-Dsonar.externalIssuesReportPaths=cx_result_sonar.json