Update checkmarx-ts/checkmarx-cxflow-github-action digest to 7d4d015

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
checkmarx-ts/checkmarx-cxflow-github-action	action	digest	49d8269 -> 7d4d015

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dryrunsecurity]

DryRun Security Summary

The pull request updates the Checkmarx CxFlow GitHub Action version to enhance application security by integrating static application security testing (SAST) into the GitHub workflow.

Expand for full summary

Summary:

The code change in this pull request updates the version of the Checkmarx CxFlow GitHub Action used in the GitHub workflow. The Checkmarx CxFlow Action is a tool that integrates Checkmarx's static application security testing (SAST) into the GitHub workflow. This update is a positive step towards improving the security of the application, as it can help identify vulnerabilities early in the software development lifecycle.

From an application security perspective, the key points to consider are the version update, the integration of Checkmarx SAST, the handling of sensitive information, the scan filters, and the SARIF report upload. It's important to ensure that the sensitive information is properly secured, the scan filters are configured correctly, and the SARIF report is reviewed and addressed as needed. Overall, this code change appears to be a step in the right direction for improving the security of the application.

Files Changed:

• .github/workflows/checkmarx.yml: This file updates the version of the Checkmarx CxFlow GitHub Action used in the GitHub workflow. The changes include updating the version of the action, integrating Checkmarx SAST into the workflow, handling sensitive information, configuring scan filters, and uploading the SARIF report to GitHub.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[guardrails]

⚠️ We detected 1 security issue in this pull request:

Hard-Coded Secrets (1)

Severity	Details	Docs
Medium	Title: Github Key scsctl/.github/workflows/checkmarx.yml Line 41 in 757b9b3 uses: checkmarx-ts/checkmarx-cxflow-github-action@21abae31310088c06faf29d1be84374c7e0eee42	📚

More info on how to fix Hard-Coded Secrets in General.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[github-actions]

Stale pull request message