Skip to content

build(deps): update snyk/actions requirement to 1d672a455ab3339ef0a0021e1ec809165ee12fad #185

build(deps): update snyk/actions requirement to 1d672a455ab3339ef0a0021e1ec809165ee12fad

build(deps): update snyk/actions requirement to 1d672a455ab3339ef0a0021e1ec809165ee12fad #185

Workflow file for this run

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
name: Synopsys Security Testing
on:
push:
# At this time, it is recommended to run Polaris only on pushes to main branches
# Pull request analysis will be supported by Polaris in the future
branches: [ "master" ]
pull_request:
branches: [ "master" ]
permissions:
contents: read
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Harden Runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Synopsys Action
uses: synopsys-sig/synopsys-action@cef5e38596faf5d2787bbff78a5d7255a9f7682b # v1.8.0
with:
#------------------------------------------COVERITY-----------------------------------------
coverity_url: ${{ secrets.COVERITY_URL }}
coverity_user: ${{ secrets.COVERITY_USER }}
coverity_passphrase: ${{ secrets.COVERITY_PASSPHRASE }}
#------------------------------------------BLACKDUCK----------------------------------------
blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
blackduck_url: ${{ secrets.BLACKDUCK_URL }}
#------------------------------------------POLARIS------------------------------------------
polaris_server_url: ${{ secrets.POLARIS_SERVER_URL }}
polaris_access_token: ${{ secrets.POLARIS_ACCESS_TOKEN }}
polaris_assessment_types: "SCA,SAST"