build(deps): bump apisec-inc/apisec-run-scan from 1.0.6 to 1.0.7 #34
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow uses actions that are not certified by GitHub. | |
| # They are provided by a third-party and are governed by | |
| # separate terms of service, privacy policy, and support | |
| # documentation. | |
| # | |
| # The zimperium-zscan GitHub action scans your mobile app binary (iOS or Android) | |
| # and identifies security, privacy, and compliance-related vulnerabilities. | |
| # | |
| # Prerequisites: | |
| # * An active Zimperium zScan account is required. If you are not an existing Zimperium | |
| # zScan customer, please request a zSCAN demo by visiting https://www.zimperium.com/contact-us. | |
| # * Either GitHub Advanced Security (GHAS) or a public repository is required to display | |
| # issues and view the remediation information inside of GitHub code scanning alerts. | |
| # | |
| # For additional information and setup instructions | |
| # please visit: https://github.com/Zimperium/zScanMarketplace#readme | |
| name: "Zimperium zScan" | |
| on: | |
| push: | |
| branches: [ "master" ] | |
| pull_request: | |
| branches: [ "master" ] | |
| permissions: | |
| contents: read | |
| jobs: | |
| zscan: | |
| name: zScan | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read # for actions/checkout to fetch code | |
| security-events: write # for github/codeql-action/upload-sarif to upload SARIF results | |
| actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
| - name: Execute gradle build | |
| run: ./gradlew build # Change this to build your mobile application | |
| - name: Run Zimperium zScan | |
| uses: zimperium/zscanmarketplace@bfc6670f6648d796098c251ccefcfdb98983174d | |
| timeout-minutes: 60 | |
| with: | |
| # REPLACE: Zimperium Client Environment Name | |
| client_env: env_string | |
| # REPLACE: Zimperium Client ID | |
| client_id: id_string | |
| # REPLACE: Zimperium Client Secret | |
| client_secret: ${{ secrets.ZSCAN_CLIENT_SECRET }} | |
| # REPLACE: The path to an .ipa or .apk | |
| app_file: app-release-unsigned.apk | |
| - name: Upload SARIF file | |
| uses: github/codeql-action/upload-sarif@2f93e4319b2f04a2efc38fa7f78bd681bc3f7b2f # v2.23.2 | |
| with: | |
| sarif_file: Zimperium.sarif |