forked from jrocia/Integration-AppScan-onprem-and-Gitlab
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsast-src-ase-gitlab-ci.yml
47 lines (38 loc) · 2.33 KB
/
sast-src-ase-gitlab-ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
variables:
aseToken: C:\ProgramData\HCL\AppScanSource\config\ounceautod.token
aseHostname: xxxxxxxxxxxxx
aseAppName: $CI_PROJECT_NAME
aseApiKeyId: xxxxxxxxxxxxx
aseApiKeySecret: xxxxxxxxxxxxx
compiledArtifactFolder: none # when is "none" scan sourcecodeonly
scanConfig: Normal scan
sevSecGw: highIssues
maxIssuesAllowed: 100
# artifactFolder: $CI_PROJECT_DIR\build\libs
# artifactName: xxxxxxxxxxxxx.war
stages:
- scan
scan-job:
stage: scan
script:
- Invoke-WebRequest -Uri https://raw.githubusercontent.com/jrocia/Integration-AppScan-onprem-and-Gitlab/main/scripts/appscanase_create_application_ase.ps1 -OutFile appscanase_create_application_ase.ps1
- .\appscanase_create_application_ase.ps1
- Invoke-WebRequest -Uri https://raw.githubusercontent.com/jrocia/Integration-AppScan-onprem-and-Gitlab/main/scripts/appscansrc_create_config_scan_folder.ps1 -OutFile appscansrc_create_config_scan_file.ps1
- .\appscansrc_create_config_scan_folder.ps1
- Invoke-WebRequest -Uri https://raw.githubusercontent.com/jrocia/Integration-AppScan-onprem-and-Gitlab/main/scripts/appscansrc_scan.ps1 -OutFile appscansrc_scan.ps1
- .\appscansrc_scan.ps1
- Invoke-WebRequest -Uri https://raw.githubusercontent.com/jrocia/Integration-AppScan-onprem-and-Gitlab/main/scripts/appscansrc_publish_assessment_to_enterprise.ps1 -OutFile appscansrc_publish_assessment_to_enterprise.ps1
- .\appscansrc_publish_assessment_to_enterprise.ps1
- Invoke-WebRequest -Uri https://raw.githubusercontent.com/jrocia/Integration-AppScan-onprem-and-Gitlab/main/scripts/appscanase_get_xml_report_from_enterprise.ps1 -OutFile appscanase_get_xml_report_from_enterprise.ps1
- .\appscanase_get_xml_report_from_enterprise.ps1
- Invoke-WebRequest -Uri https://raw.githubusercontent.com/jrocia/Integration-AppScan-onprem-and-Gitlab/main/scripts/appscanase_convert_ase_sast_xml_to_gitlab_json.ps1 -OutFile appscanase_convert_ase_sast_xml_to_gitlab_json.ps1
- .\appscanase_convert_ase_sast_xml_to_gitlab_json.ps1
- Invoke-WebRequest -Uri https://raw.githubusercontent.com/jrocia/Integration-AppScan-onprem-and-Gitlab/main/scripts/appscansrc_check_security_gate.ps1 -OutFile appscansrc_check_security_gate.ps1
- .\appscansrc_check_security_gate.ps1
artifacts:
when: always
paths:
- "*.ozasmt"
- "*.pdf"
reports:
sast: .\scan_report\gl-sast-report.json