fortify.yml

# @scf-option {"processors": []}
name: Fortify

on:
  push:
    branches: [main]

jobs:
  fortify:
    runs-on: [self-hosted, devsecops]
    name: Fortify
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Checkout Application & Version Action
        run: git clone git@github.com-fortify-action-api:grupoboticario/fortify-action-api.git .github/fortify-action-api
      - name: Checkout SAST Assessment Action
        run: git clone git@github.com-fortify-action-sast:grupoboticario/fortify-action-sast.git .github/fortify-action-sast
      - name: Import Secrets
        uses: hashicorp/vault-action@v2.4.0
        with:
          url: https://heimdall.grupoboticario.digital
          token: ${{ secrets.FORTIFY_VAULT_TOKEN }}
          secrets: |
            fortify/secrets/gbaction userf ;
            fortify/secrets/gbaction citoken ;
            fortify/secrets/gbaction scancentral
      - name: Create Application & Version
        uses: ./.github/fortify-action-api
        id: fortify_api
        with:
          api_credentials: "${{ env.USERF }}"
          application_name: "${{ github.repository }}"
          application_version: "main"
      - name: SAST
        uses: ./.github/fortify-action-sast
        id: SAST
        with:
          application_name: "${{ github.repository }}"
          application_version: "main"
          client_token: "${{ env.SCANCENTRAL }}"
          ci_token: "${{ env.CITOKEN }}"
          language_profile: other