Skip to content

Commit 9b7a6e2

Browse files
committed
add wiz scan on create PR to 3.0.0 (SWG-14342)
1 parent 55dfc71 commit 9b7a6e2

File tree

1 file changed

+21
-21
lines changed

1 file changed

+21
-21
lines changed

.github/workflows/maven-master-pulls.yml

Lines changed: 21 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,26 @@ jobs:
3232
- name: Build with Maven
3333
run: mvn -B -U verify --file pom.xml
3434

35+
- name: Download Wiz CLI
36+
run: curl -o wizcli https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64 && chmod +x wizcli
37+
38+
- name: Authenticate to Wiz
39+
run: ./wizcli auth --id "$WIZ_CLIENT_ID" --secret "$WIZ_CLIENT_SECRET"
40+
env:
41+
WIZ_CLIENT_ID: ${{ secrets.WIZ_CLIENT_ID }}
42+
WIZ_CLIENT_SECRET: ${{ secrets.WIZ_CLIENT_SECRET }}
43+
44+
- name: Scan Maven build directory with Wiz
45+
run: |
46+
./wizcli dir scan \
47+
--path . \
48+
--policy "$POLICY" \
49+
--tag repo="${{ github.repository }}" \
50+
--tag commit="${{ github.sha }}" \
51+
--tag java="${{ matrix.java }}"
52+
env:
53+
POLICY: "SmartBear default vulnerabilities policy"
54+
3555
build-java8:
3656

3757
runs-on: ubuntu-latest
@@ -57,24 +77,4 @@ jobs:
5777
restore-keys: |
5878
${{ runner.os }}-maven-
5979
- name: Build with Maven
60-
run: mvn -B -U clean verify -DskipTests -Dmaven.test.skip=true -Dmaven.site.skip=true -Dmaven.javadoc.skip=true -Psamples-java8 --file pom.xml
61-
62-
- name: Download Wiz CLI
63-
run: curl -o wizcli https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64 && chmod +x wizcli
64-
65-
- name: Authenticate to Wiz
66-
run: ./wizcli auth --id "$WIZ_CLIENT_ID" --secret "$WIZ_CLIENT_SECRET"
67-
env:
68-
WIZ_CLIENT_ID: ${{ secrets.WIZ_CLIENT_ID }}
69-
WIZ_CLIENT_SECRET: ${{ secrets.WIZ_CLIENT_SECRET }}
70-
71-
- name: Scan Maven build directory with Wiz
72-
run: |
73-
./wizcli dir scan \
74-
--path . \
75-
--policy "$POLICY" \
76-
--tag repo="${{ github.repository }}" \
77-
--tag commit="${{ github.sha }}" \
78-
--tag java="${{ matrix.java }}"
79-
env:
80-
POLICY: "SmartBear default vulnerabilities policy"
80+
run: mvn -B -U clean verify -DskipTests -Dmaven.test.skip=true -Dmaven.site.skip=true -Dmaven.javadoc.skip=true -Psamples-java8 --file pom.xml

0 commit comments

Comments
 (0)