diff --git a/.github/workflows/security-checks.yml b/.github/workflows/security-checks.yml new file mode 100644 index 0000000000..ac5cdda0d5 --- /dev/null +++ b/.github/workflows/security-checks.yml @@ -0,0 +1,32 @@ +name: security-checks + +concurrency: + group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} + cancel-in-progress: true + +on: + pull_request: + branches: + - develop + push: + branches: + - develop + workflow_dispatch: + schedule: + - cron: 0 1 * * 1-5 + +jobs: + secrets_scan: + uses: centreon/security-tools/.github/workflows/gitleaks-analysis-test.yml@develop + + code_scan: + uses: centreon/security-tools/.github/workflows/checkmarx-analysis-test.yml@develop + with: + module_directory: + module_name: test-public + exclude_list: + secrets: + base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }} + cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }} + cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }} + cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}