From de0a1240e6ae0f8ff9d08498b96a362908f0a72f Mon Sep 17 00:00:00 2001 From: olegchorny Date: Thu, 21 Dec 2023 16:17:29 +0200 Subject: [PATCH 1/3] Try bearer --- .github/workflows/bearer.yml | 42 ++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 .github/workflows/bearer.yml diff --git a/.github/workflows/bearer.yml b/.github/workflows/bearer.yml new file mode 100644 index 00000000..9c3c6959 --- /dev/null +++ b/.github/workflows/bearer.yml @@ -0,0 +1,42 @@ +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. +# +# This workflow file requires a free account on Bearer.com to manage findings, notifications and more. +# See https://docs.bearer.com/guides/bearer-cloud/ +name: Bearer + +on: + push: + branches: ["master" ] + pull_request: + # The branches below must be a subset of the branches above + branches: ["master"] + schedule: + - cron: '30 41 * * 4' + +permissions: + contents: read # for actions/checkout to fetch code + security-events: write # for github/codeql-action/upload-sarif to upload SARIF results + actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status + +jobs: + bearer: + runs-on: ubuntu-latest + steps: + # Checkout project source + - uses: actions/checkout@v3 + # Scan code using Bearer CLI + - name: Run Report + id: report + uses: bearer/bearer-action@v2 + with: + format: sarif + output: results.sarif + exit-code: 0 + # Upload SARIF file generated in previous step + - name: Upload SARIF file + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: results.sarif From ffda0f94d2ada1aa15d8e9e6063951f1e2f6de60 Mon Sep 17 00:00:00 2001 From: olegchorny Date: Thu, 21 Dec 2023 16:18:33 +0200 Subject: [PATCH 2/3] fix schedule --- .github/workflows/bearer.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/bearer.yml b/.github/workflows/bearer.yml index 9c3c6959..6326bd5a 100644 --- a/.github/workflows/bearer.yml +++ b/.github/workflows/bearer.yml @@ -14,7 +14,7 @@ on: # The branches below must be a subset of the branches above branches: ["master"] schedule: - - cron: '30 41 * * 4' + - cron: '30 14 * * 4' permissions: contents: read # for actions/checkout to fetch code From 6c4b7d4017bcd84f55d434a34546d742f1f659f5 Mon Sep 17 00:00:00 2001 From: olegchorny Date: Thu, 21 Dec 2023 16:25:30 +0200 Subject: [PATCH 3/3] Update bearer.yml --- .github/workflows/bearer.yml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/bearer.yml b/.github/workflows/bearer.yml index 6326bd5a..02f9c437 100644 --- a/.github/workflows/bearer.yml +++ b/.github/workflows/bearer.yml @@ -31,12 +31,12 @@ jobs: - name: Run Report id: report uses: bearer/bearer-action@v2 - with: - format: sarif - output: results.sarif - exit-code: 0 + # with: + # format: sarif + # output: results.sarif + # exit-code: 0 # Upload SARIF file generated in previous step - - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v2 - with: - sarif_file: results.sarif + #- name: Upload SARIF file + # uses: github/codeql-action/upload-sarif@v2 + # with: + # sarif_file: results.sarif