From 15598d3a5e62e29d9f1c12321973a075459083a5 Mon Sep 17 00:00:00 2001 From: schapron Date: Wed, 27 Aug 2025 17:56:33 +0200 Subject: [PATCH 1/4] test --- .github/workflows/security-checks.yml | 31 +++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/security-checks.yml diff --git a/.github/workflows/security-checks.yml b/.github/workflows/security-checks.yml new file mode 100644 index 0000000000..ae667260fa --- /dev/null +++ b/.github/workflows/security-checks.yml @@ -0,0 +1,31 @@ +name: security-checks + +concurrency: + group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} + cancel-in-progress: true + +on: + pull_request: + branches: + - main + push: + branches: + - main + workflow_dispatch: + schedule: + - cron: 0 1 * * 1-5 + +jobs: + secrets_scan: + uses: centreon/security-tools/.github/workflows/gitleaks-analysis-test.yml@develop + + code_scan: + uses: centreon/security-tools/.github/workflows/checkmarx-analysis-test.yml@develop + with: + module_directory: + module_name: cs-files + secrets: + base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }} + cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }} + cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }} + cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }} From 0d6345d4e6e942604c5bc58a40d0529620419e11 Mon Sep 17 00:00:00 2001 From: schapron Date: Wed, 27 Aug 2025 18:02:00 +0200 Subject: [PATCH 2/4] test --- .github/workflows/security-checks.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/security-checks.yml b/.github/workflows/security-checks.yml index ae667260fa..d5506065e9 100644 --- a/.github/workflows/security-checks.yml +++ b/.github/workflows/security-checks.yml @@ -7,10 +7,10 @@ concurrency: on: pull_request: branches: - - main + - develop push: branches: - - main + - develop workflow_dispatch: schedule: - cron: 0 1 * * 1-5 @@ -23,9 +23,10 @@ jobs: uses: centreon/security-tools/.github/workflows/checkmarx-analysis-test.yml@develop with: module_directory: - module_name: cs-files + module_name: test-public secrets: base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }} cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }} cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }} cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }} + exclude_list: From e1cc09a98a808fe154db6598ac9433b2e6b2d78b Mon Sep 17 00:00:00 2001 From: schapron Date: Wed, 27 Aug 2025 18:04:50 +0200 Subject: [PATCH 3/4] test --- .github/workflows/security-checks.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-checks.yml b/.github/workflows/security-checks.yml index d5506065e9..f53e1fbe11 100644 --- a/.github/workflows/security-checks.yml +++ b/.github/workflows/security-checks.yml @@ -29,4 +29,4 @@ jobs: cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }} cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }} cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }} - exclude_list: + exclude_list: "" From 5b30954ca34b9d9b18e586ba6809a911ef33c71f Mon Sep 17 00:00:00 2001 From: schapron Date: Wed, 27 Aug 2025 18:05:31 +0200 Subject: [PATCH 4/4] test --- .github/workflows/security-checks.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-checks.yml b/.github/workflows/security-checks.yml index f53e1fbe11..ac5cdda0d5 100644 --- a/.github/workflows/security-checks.yml +++ b/.github/workflows/security-checks.yml @@ -24,9 +24,9 @@ jobs: with: module_directory: module_name: test-public + exclude_list: secrets: base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }} cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }} cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }} cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }} - exclude_list: ""