@@ -43,17 +43,17 @@ jobs:
43
43
44
44
# Perform SAST and/or SCA scan via Fortify on Demand/Fortify Hosted/ScanCentral SAST/Debricked. Based on
45
45
# configuration, the Fortify GitHub Action can optionally set up the application version/release, generate
46
- # job summaries and Pull Request comments, and/or export SAST results to the GitHub code scanning dashboard.
47
- # The Fortify GitHub Action provides many customization capabilities, but in case further customization is
46
+ # job summaries and Pull Request comments, and/or export SAST results to the GitHub code scanning dashboard.
47
+ # The Fortify GitHub Action provides many customization capabilities, but in case further customization is
48
48
# required, you can use sub-actions like fortify/github-action/setup@v1 to set up the various Fortify tools
49
- # and run them directly from within your pipeline. It is recommended to review the Fortify GitHub Action
49
+ # and run them directly from within your pipeline. It is recommended to review the Fortify GitHub Action
50
50
# documentation at https://github.com/fortify/github-action#readme for more information on the various
51
51
# configuration options and available sub-actions.
52
52
- name : Run Fortify Scan
53
53
# Specify Fortify GitHub Action version to run. As per GitHub starter workflow requirements, this example
54
54
# uses the commit id corresponding to version 1.5.2. It is recommended to check whether any later releases
55
55
# are available at https://github.com/fortify/github-action/releases. Depending on the amount of stability
56
- # required, you may want to consider using fortify/github-action@v1 instead to use the latest 1.x.y version
56
+ # required, you may want to consider using fortify/github-action@v1 instead to use the latest 1.x.y version
57
57
# of this action, allowing your workflows to automatically benefit from any new features and bug fixes.
58
58
uses : fortify/github-action@afb2d9e467caf7c6ad273799fc1b65ac492b0de2
59
59
with :
@@ -103,7 +103,7 @@ jobs:
103
103
SC_SAST_TOKEN : ${{secrets.SC_CLIENT_AUTH_TOKEN}} # ScanCentral SAST client_auth_token, required if SAST scan is enabled
104
104
DEBRICKED_TOKEN : ${{secrets.DEBRICKED_TOKEN}} # Debricked token, required if Debricked scan is enabled
105
105
SC_SAST_SENSOR_VERSION : 24.4.0 # Sensor version to use for the scan, required if SAST scan is enabled
106
- # ## Optional configuration
106
+ # ## Optional configuration
107
107
# SSC_LOGIN_EXTRA_OPTS: --socket-timeout=60s # Extra 'fcli ssc session login' options
108
108
# SC_SAST_LOGIN_EXTRA_OPTS: --socket-timeout=60s # Extra 'fcli sc-sast session login' options
109
109
# SSC_APPVERSION: MyApp:MyVersion # SSC application version name, default: <org>/<repo>:<branch>
0 commit comments