From b50c1e9cdc7e0124a6af9b9b32863742ad402dee Mon Sep 17 00:00:00 2001 From: Aaron Miller Date: Sat, 3 Feb 2024 18:58:43 -0800 Subject: [PATCH 1/2] Create scan.yml --- .github/workflows/scan.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/scan.yml diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml new file mode 100644 index 0000000..dae7efa --- /dev/null +++ b/.github/workflows/scan.yml @@ -0,0 +1,24 @@ +name: OX Scan CI + +on: + push: + branches: [ "main" ] + +jobs: + build: + runs-on: ubuntu-latest + + steps: + - + name: Checkout + uses: actions/checkout@v3 + - + name: Run OX Security Scan to check for vulnerabilities + with: + ox_api_key: ${{ secrets.OX_API_KEY }} + ox_timeout: 1 + ox_fail_on_timeout: true + ox_scan_full_branch: true + ox_override_blocking: true + #ox_fail_on_error: true + uses: oxsecurity/ox-security-scan@main From 0e3ea0db1fee0fcc161fe40c8288c6146185b0c8 Mon Sep 17 00:00:00 2001 From: Aaron Miller Date: Sat, 3 Feb 2024 19:02:29 -0800 Subject: [PATCH 2/2] Update scan.yml --- .github/workflows/scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index dae7efa..3fd8fbf 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -16,7 +16,7 @@ jobs: name: Run OX Security Scan to check for vulnerabilities with: ox_api_key: ${{ secrets.OX_API_KEY }} - ox_timeout: 1 + ox_timeout: 5 ox_fail_on_timeout: true ox_scan_full_branch: true ox_override_blocking: true