From 72339a979f3226d46530cbdba6671624b0eee561 Mon Sep 17 00:00:00 2001 From: Francesco Mifsud Date: Tue, 22 Aug 2023 20:04:30 +0200 Subject: [PATCH 1/2] Create security-pipeline.yml --- .github/workflows/security-pipeline.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/workflows/security-pipeline.yml diff --git a/.github/workflows/security-pipeline.yml b/.github/workflows/security-pipeline.yml new file mode 100644 index 0000000..78bf73a --- /dev/null +++ b/.github/workflows/security-pipeline.yml @@ -0,0 +1,17 @@ +name: Security Checker +run-name: Running Security Checker +on: + workflow_dispatch: + pull_request: + branches: [main] +jobs: + Security-Pipeline: + uses: GradiusX/security-pipeline/.github/workflows/pipeline.yml@dev + with: + continue-on-error: false + severity-level: "critical" + secrets-exclusion-list: > + ^\.git/.* + defectdojo-url: ${{ vars.DEFECTDOJO_URL }} + secrets: + defectdojo-api-key: ${{ secrets.DEFECTDOJO_API_KEY }} From 32c794c37305a90636da4edd55bc7e60f6f817d9 Mon Sep 17 00:00:00 2001 From: Francesco Mifsud Date: Tue, 22 Aug 2023 20:11:08 +0200 Subject: [PATCH 2/2] Update security-pipeline.yml --- .github/workflows/security-pipeline.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-pipeline.yml b/.github/workflows/security-pipeline.yml index 78bf73a..fab4753 100644 --- a/.github/workflows/security-pipeline.yml +++ b/.github/workflows/security-pipeline.yml @@ -6,7 +6,7 @@ on: branches: [main] jobs: Security-Pipeline: - uses: GradiusX/security-pipeline/.github/workflows/pipeline.yml@dev + uses: GradiusX/security-pipeline/.github/workflows/pipeline.yml@main with: continue-on-error: false severity-level: "critical"