diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml index fc682e81e69..ee1ffdd4a19 100644 --- a/.github/workflows/codacy.yml +++ b/.github/workflows/codacy.yml @@ -1,30 +1,22 @@ - - name: defectdojo findings threshold - # You may pin to the exact commit or the version. - # uses: portswigger-cloud/defectdojo-findings-thresholds@d61c4c6fe732eded4828e76dd538098b48b7d245 - uses: portswigger-cloud/defectdojo-findings-thresholds@v1.0.1 - with: - # the url of your defectdojo instance - defectdojo-url: ${{ secrets.DEFECTDOJO_URL }} - # the username to login into your defectdojo instance - defectdojo-username: ${{ secrets.DEFECTDOJO_USERNAME }} - # the password to login into your defectdojo instance - defectdojo-password: ${{ secrets.DEFECTDOJO_PASSWORD }} - # the defectdojo product that the scan result relates to - defectdojo-product: 'your-product-name' - # the file path for a client side certificate if required - client-certificate-file-path: # optional - # the file path for a client side private key if required - client-key-file-path: # optional - # total findings threshold - total-threshold: # optional, default is false - # critical findings threshold - critical-threshold: # optional, default is false - # high findings threshold - high-threshold: # optional, default is false - # medium findings threshold - medium-threshold: # optional, default is false - # low findings threshold - low-threshold: # optional, default is false - # info findings threshold - info-threshold: # optional, default is false - +name: DefectDojo Findings Threshold +on: [push, pull_request] +jobs: + check-findings: + runs-on: ubuntu-latest + permissions: + contents: read + steps: + - name: defectdojo findings threshold + # You may pin to the exact commit or the version. + # uses: portswigger-cloud/defectdojo-findings-thresholds@d61c4c6fe732eded4828e76dd538098b48b7d245 + uses: portswigger-cloud/defectdojo-findings-thresholds@v1.0.1 + with: + # the url of your defectdojo instance + defectdojo-url: ${{ secrets.DEFECTDOJO_URL }} + # the username to login into your defectdojo instance + defectdojo-username: ${{ secrets.DEFECTDOJO_USERNAME }} + # the password to login into your defectdojo instance + defectdojo-password: ${{ secrets.DEFECTDOJO_PASSWORD }} + # the defectdojo product that the scan result relates to + # TODO: Replace 'your-product-name' with the actual product name in DefectDojo + defectdojo-product: 'your-product-name'