diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index e3cb658b..b71081d4 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -15,7 +15,6 @@ on: push: branches: [ "main" ] pull_request: - # The branches below must be a subset of the branches above branches: [ "main" ] schedule: - cron: '35 3 * * 0' diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml new file mode 100644 index 00000000..6d912a10 --- /dev/null +++ b/.github/workflows/dependabot.yml @@ -0,0 +1,18 @@ +name: 'Dependabot Review' +on: + pull_request: + branches: + - main + +permissions: + contents: read + +jobs: + dependabot-review: + name: Dependabot Review + runs-on: ubuntu-latest + steps: + - name: 'Checkout Repository' + uses: actions/checkout@v3 + - name: 'Dependency Review' + uses: actions/dependency-review-action@v3 \ No newline at end of file diff --git a/.github/workflows/hawkscan.yml b/.github/workflows/hawkscan.yml index 2ee41716..02604d88 100644 --- a/.github/workflows/hawkscan.yml +++ b/.github/workflows/hawkscan.yml @@ -12,9 +12,8 @@ jobs: build-and-test: name: Build and Scan runs-on: ubuntu-latest - env: - COMMIT_SHA: ${{ github.event.pull_request.head.sha }} - BRANCH_NAME: ${{ github.head_ref }} +# env: + steps: - name: Checkout code uses: actions/checkout@v3 @@ -32,6 +31,8 @@ jobs: - name: Run HawkScan env: HAWK_ENV: GitHub Actions + COMMIT_SHA: ${{ github.event.pull_request.head.sha }} + BRANCH_NAME: ${{ github.head_ref }} continue-on-error: true uses: stackhawk/hawkscan-action@v2 with: diff --git a/README.md b/README.md index ec13eb91..3bca0b6d 100644 --- a/README.md +++ b/README.md @@ -49,4 +49,3 @@ docker-compose up --build --detach * SQL Injection via search box. - `item%' union all select * from user; -- ` * Cross Site Scripting via search box. - `` -Blank comment diff --git a/stackhawk.yml b/stackhawk.yml index d91b6e0b..dc2b0119 100644 --- a/stackhawk.yml +++ b/stackhawk.yml @@ -3,11 +3,19 @@ app: env: ${HAWK_ENV:Development} # (required) host: http://localhost:3000 # (required) -hawk: - failureThreshold: high + + + + + + + + + tags: - name: _STACKHAWK_GIT_COMMIT_SHA - value: ${COMMIT_SHA:} + value: ${COMMIT_SHA} - name: _STACKHAWK_GIT_BRANCH - value: ${GITHUB_HEAD_REF:} \ No newline at end of file +# value: ${GITHUB_HEAD_REF:} + value: ${BRANCH_NAME} \ No newline at end of file