Skip to content
Back to pull request #216

Bump checkmarx/ast-github-action from 2.0.31 to 2.0.38 #494

Sign in to view logs

Bump checkmarx/ast-github-action from 2.0.31 to 2.0.38

Bump checkmarx/ast-github-action from 2.0.31 to 2.0.38 #494

Workflow file for this run

.github/workflows/ast-scan.yml at c981c56
name: Checkmarx One Scan
on: [ pull_request, workflow_dispatch ]
jobs:
cx-scan:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Checkmarx One CLI Action
uses: checkmarx/ast-github-action@de327a92d7f419bfdc7c3e5535ad7b3bbce91677 #main
with:
base_uri: ${{ secrets.AST_RND_SCANS_BASE_URI }}
cx_tenant: ${{ secrets.AST_RND_SCANS_TENANT }}
cx_client_id: ${{ secrets.AST_RND_SCANS_CLIENT_ID }}
cx_client_secret: ${{ secrets.AST_RND_SCANS_CLIENT_SECRET }}
additional_params: --tags phoenix --threshold "sast-critical=1;sast-high=1;sast-medium=1;sast-low=1;sca-critical=1;sca-high=1;sca-medium=1;sca-low=1;iac-security-critical=1;iac-security-high=1;iac-security-medium=1;iac-security-low=1;"