Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

updated zscan.yml file for latest release #2349

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

updated zscan.yml file for latest release #2349

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3dfb4f8
updated zscan.yml file for latest release
mthibeau73 Mar 20, 2024
2b7bd6b
Update push and pull request branch information
mthibeau73 Mar 21, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
47 changes: 24 additions & 23 deletions code-scanning/zscan.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,26 +35,27 @@ jobs:
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
steps:
- name: Checkout repository
uses: actions/checkout@v3

- name: Execute gradle build
run: ./gradlew build # Change this to build your mobile application

- name: Run Zimperium zScan
uses: zimperium/zscanmarketplace@bfc6670f6648d796098c251ccefcfdb98983174d
timeout-minutes: 60
with:
# REPLACE: Zimperium Client Environment Name
client_env: env_string
# REPLACE: Zimperium Client ID
client_id: id_string
# REPLACE: Zimperium Client Secret
client_secret: ${{ secrets.ZSCAN_CLIENT_SECRET }}
# REPLACE: The path to an .ipa or .apk
app_file: app-release-unsigned.apk

- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: Zimperium.sarif
- name: Checkout repository
uses: actions/checkout@v3

# - name: Execute gradle build
# run: echo "./gradlew build"

- name: Run Zimperium zScan
uses: zimperium/zscanmarketplace@fdb690e663100206dd3d8abad03c05d00de69043
timeout-minutes: 60
with:

# REPLACE: Zimperium Client Environment Name
client_env: <Paste Client Env Name Here>
# REPLACE: Zimperium Client ID
client_id: <Paste CLIENT_ID Here>
# REPLACE: Zimperium Client Secret
client_secret: ${{ secrets.ZSCAN_CLIENT_SECRET }}
# REPLACE: The path to an .ipa or .apk
app_file: ./InsecureBankv2.apk

- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: Zimperium.sarif