From e0d595fd6c36e47ccebd5c69f560e8fcc54539ac Mon Sep 17 00:00:00 2001 From: Duan-0916 <76544421+Duan-0916@users.noreply.github.com> Date: Thu, 30 Nov 2023 10:28:56 +0800 Subject: [PATCH 1/2] Create cloud_code_scan.yml --- .github/workflows/cloud_code_scan.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/cloud_code_scan.yml diff --git a/.github/workflows/cloud_code_scan.yml b/.github/workflows/cloud_code_scan.yml new file mode 100644 index 000000000..f735fd3d9 --- /dev/null +++ b/.github/workflows/cloud_code_scan.yml @@ -0,0 +1,22 @@ +name: Alipay Cloud Devops Codescan +on: + pull_request_target: +jobs: + stc: #安全扫描 + runs-on: ubuntu-latest + steps: + - name: codeScan + uses: layotto/alipay-cloud-devops-codescan@main + with: + parent_uid: ${{ secrets.ALI_PID }} + private_key: ${{ secrets.ALI_PK }} + scan_type: stc + sca: # 开源合规 + runs-on: ubuntu-latest + steps: + - name: codeScan + uses: layotto/alipay-cloud-devops-codescan@main + with: + parent_uid: ${{ secrets.ALI_PID }} + private_key: ${{ secrets.ALI_PK }} + scan_type: sca From 9e535bde317dc1e2ab3c9eaf706c2eb3cf8998e0 Mon Sep 17 00:00:00 2001 From: Duan-0916 <76544421+Duan-0916@users.noreply.github.com> Date: Thu, 30 Nov 2023 14:07:44 +0800 Subject: [PATCH 2/2] Update cloud_code_scan.yml --- .github/workflows/cloud_code_scan.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/cloud_code_scan.yml b/.github/workflows/cloud_code_scan.yml index f735fd3d9..9a6da4aec 100644 --- a/.github/workflows/cloud_code_scan.yml +++ b/.github/workflows/cloud_code_scan.yml @@ -2,7 +2,7 @@ name: Alipay Cloud Devops Codescan on: pull_request_target: jobs: - stc: #安全扫描 + stc: # Code security scanning runs-on: ubuntu-latest steps: - name: codeScan @@ -11,7 +11,7 @@ jobs: parent_uid: ${{ secrets.ALI_PID }} private_key: ${{ secrets.ALI_PK }} scan_type: stc - sca: # 开源合规 + sca: # Open source compliance scanning runs-on: ubuntu-latest steps: - name: codeScan