From ff80380ed637170c082d6a59428bd2b7761d87b6 Mon Sep 17 00:00:00 2001 From: Zachary Conger Date: Mon, 15 May 2023 23:07:51 -0600 Subject: [PATCH 1/7] Update hawkscan.yml From 05d062a16a155eea0f75dc9800f89a586f436874 Mon Sep 17 00:00:00 2001 From: Zachary Conger Date: Tue, 20 Jun 2023 14:19:34 -0600 Subject: [PATCH 2/7] add dependabot review --- .github/workflows/codeql-analysis.yml | 1 - .github/workflows/dependabot.yml | 18 ++++++++++++++++++ 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/dependabot.yml diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index e3cb658b..b71081d4 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -15,7 +15,6 @@ on: push: branches: [ "main" ] pull_request: - # The branches below must be a subset of the branches above branches: [ "main" ] schedule: - cron: '35 3 * * 0' diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml new file mode 100644 index 00000000..6d912a10 --- /dev/null +++ b/.github/workflows/dependabot.yml @@ -0,0 +1,18 @@ +name: 'Dependabot Review' +on: + pull_request: + branches: + - main + +permissions: + contents: read + +jobs: + dependabot-review: + name: Dependabot Review + runs-on: ubuntu-latest + steps: + - name: 'Checkout Repository' + uses: actions/checkout@v3 + - name: 'Dependency Review' + uses: actions/dependency-review-action@v3 \ No newline at end of file From bad716c1e36b6dbe49ed699816361afdcc0f5b9a Mon Sep 17 00:00:00 2001 From: April Conger Date: Thu, 9 May 2024 12:40:21 -0600 Subject: [PATCH 3/7] Update README.md --- README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/README.md b/README.md index 8a90ce82..3f4c9d10 100644 --- a/README.md +++ b/README.md @@ -47,4 +47,3 @@ docker-compose up --build --detach * SQL Injection via search box. - `item%' union all select * from user; -- ` * Cross Site Scripting via search box. - `` -Blank comment \ No newline at end of file From 254f663079b50d5a999ce114a63b28cca5b1ebe3 Mon Sep 17 00:00:00 2001 From: Zachary Conger Date: Fri, 4 Aug 2023 08:13:48 -0600 Subject: [PATCH 4/7] tweaks --- stackhawk.yml | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/stackhawk.yml b/stackhawk.yml index d91b6e0b..74494562 100644 --- a/stackhawk.yml +++ b/stackhawk.yml @@ -3,8 +3,15 @@ app: env: ${HAWK_ENV:Development} # (required) host: http://localhost:3000 # (required) -hawk: - failureThreshold: high + + + + + + + + + tags: - name: _STACKHAWK_GIT_COMMIT_SHA From c5ee6072d363625ded3d2111b0e84cd5b717e9f1 Mon Sep 17 00:00:00 2001 From: Zachary Conger Date: Thu, 9 May 2024 14:54:02 -0600 Subject: [PATCH 5/7] move PR env vars into SH action --- .github/workflows/hawkscan.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/hawkscan.yml b/.github/workflows/hawkscan.yml index 2ee41716..02604d88 100644 --- a/.github/workflows/hawkscan.yml +++ b/.github/workflows/hawkscan.yml @@ -12,9 +12,8 @@ jobs: build-and-test: name: Build and Scan runs-on: ubuntu-latest - env: - COMMIT_SHA: ${{ github.event.pull_request.head.sha }} - BRANCH_NAME: ${{ github.head_ref }} +# env: + steps: - name: Checkout code uses: actions/checkout@v3 @@ -32,6 +31,8 @@ jobs: - name: Run HawkScan env: HAWK_ENV: GitHub Actions + COMMIT_SHA: ${{ github.event.pull_request.head.sha }} + BRANCH_NAME: ${{ github.head_ref }} continue-on-error: true uses: stackhawk/hawkscan-action@v2 with: From 0d79e8e196558ee690bb2556cc0b708f0a6f6449 Mon Sep 17 00:00:00 2001 From: Zachary Conger Date: Thu, 9 May 2024 17:32:07 -0600 Subject: [PATCH 6/7] trying stuff --- stackhawk.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/stackhawk.yml b/stackhawk.yml index 74494562..1a1d8d59 100644 --- a/stackhawk.yml +++ b/stackhawk.yml @@ -17,4 +17,5 @@ tags: - name: _STACKHAWK_GIT_COMMIT_SHA value: ${COMMIT_SHA:} - name: _STACKHAWK_GIT_BRANCH - value: ${GITHUB_HEAD_REF:} \ No newline at end of file +# value: ${GITHUB_HEAD_REF:} + value: ${BRANCH_NAME:} \ No newline at end of file From 65a06272090efb459e0ea25e4fcee7d97d3d0c63 Mon Sep 17 00:00:00 2001 From: Zachary Conger Date: Thu, 9 May 2024 17:35:26 -0600 Subject: [PATCH 7/7] trying stuff --- stackhawk.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/stackhawk.yml b/stackhawk.yml index 1a1d8d59..dc2b0119 100644 --- a/stackhawk.yml +++ b/stackhawk.yml @@ -15,7 +15,7 @@ app: tags: - name: _STACKHAWK_GIT_COMMIT_SHA - value: ${COMMIT_SHA:} + value: ${COMMIT_SHA} - name: _STACKHAWK_GIT_BRANCH # value: ${GITHUB_HEAD_REF:} - value: ${BRANCH_NAME:} \ No newline at end of file + value: ${BRANCH_NAME} \ No newline at end of file