Feature/demo #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open

azconger wants to merge 9 commits into main from feature/demo

.github/workflows/codeql-analysis.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -15,7 +15,6 @@ on: @@
       push:
         branches: [ "main" ]
       pull_request:
-        # The branches below must be a subset of the branches above
         branches: [ "main" ]
       schedule:
         - cron: '35 3 * * 0'
@@ Expand Down @@

.github/workflows/dependabot.yml

-Original file line number
+Diff line change
@@ -0,0 +1,18 @@
+    name: 'Dependabot Review'
+    on:
+      pull_request:
+        branches:
+          - main
+    permissions:
+      contents: read
+    jobs:
+      dependabot-review:
+        name: Dependabot Review
+        runs-on: ubuntu-latest
+        steps:
+          - name: 'Checkout Repository'
+            uses: actions/checkout@v3
+          - name: 'Dependency Review'
+            uses: actions/dependency-review-action@v3

.github/workflows/hawkscan.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -12,9 +12,8 @@ jobs: @@
       build-and-test:
         name: Build and Scan
         runs-on: ubuntu-latest
-        env:
-          COMMIT_SHA: ${{ github.event.pull_request.head.sha }}
-          BRANCH_NAME: ${{ github.head_ref }}
+    #    env:
         steps:
           - name: Checkout code
             uses: actions/checkout@v3
@@ Expand All / @@ -32,6 +31,8 @@ jobs: @@
           - name: Run HawkScan
             env:
               HAWK_ENV: GitHub Actions
+              COMMIT_SHA: ${{ github.event.pull_request.head.sha }}
+              BRANCH_NAME: ${{ github.head_ref }}
             continue-on-error: true
             uses: stackhawk/hawkscan-action@v2
             with:
@@ Expand Down @@

README.md

Original file line number	Diff line number	Diff line change
Expand Up		@@ -49,4 +49,3 @@ docker-compose up --build --detach
		* SQL Injection via search box. - `item%' union all select * from user; -- `
		* Cross Site Scripting via search box. - `<script>alert("hey guy");</script>`

		Blank comment

stackhawk.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -3,11 +3,19 @@ app: @@
       env: ${HAWK_ENV:Development} # (required)
       host: http://localhost:3000 # (required)
-    hawk:
-      failureThreshold: high
     tags:
       - name: _STACKHAWK_GIT_COMMIT_SHA
-        value: ${COMMIT_SHA:}
+        value: ${COMMIT_SHA}
       - name: _STACKHAWK_GIT_BRANCH
-        value: ${GITHUB_HEAD_REF:}
+    #    value: ${GITHUB_HEAD_REF:}
+        value: ${BRANCH_NAME}

Provide feedback