From 0264f38b7cce75967a1d7803e3ad89714cd96729 Mon Sep 17 00:00:00 2001 From: Anand Rajakumaran <54293891+raanand-hw@users.noreply.github.com> Date: Wed, 4 Jan 2023 11:13:56 -0800 Subject: [PATCH 1/4] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 6d67c1aeb..5d35bf4e9 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ Hyperwallet REST SDK v2.4.3 =========================== - +checkj A library to manage users, transfer methods and payments through the Hyperwallet v4 API. For Hyperwallet v3 API calls, please use the latest SDK version 1.x.x. See [here](https://docs.hyperwallet.com/content/updates/v1/rest-api-v4) to learn From 732d22ae48f941805992f2d79bc443ccab5da110 Mon Sep 17 00:00:00 2001 From: Anand Rajakumaran <54293891+raanand-hw@users.noreply.github.com> Date: Wed, 4 Jan 2023 11:17:22 -0800 Subject: [PATCH 2/4] Update main.yml --- .github/workflows/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 9fbb17dba..ead2e3661 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -54,7 +54,7 @@ jobs: #env: # NODE_EXTRA_CA_CERTS: ${{ secrets.LOCAL_CA_CERT_PATH }} with: - scan-mode: RAPID + scan-mode: INTELLIGENT github-token: ${{ secrets.GITHUB_TOKEN }} detect-version: 7.12.0 blackduck-url: ${{ secrets.BLACKDUCK_URL }} From 6ae317be421c00f25e1f744423f4d4cf95264492 Mon Sep 17 00:00:00 2001 From: Anand Rajakumaran <54293891+raanand-hw@users.noreply.github.com> Date: Wed, 4 Jan 2023 11:25:39 -0800 Subject: [PATCH 3/4] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 5d35bf4e9..149f083c3 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ Hyperwallet REST SDK v2.4.3 =========================== -checkj +checkjA A library to manage users, transfer methods and payments through the Hyperwallet v4 API. For Hyperwallet v3 API calls, please use the latest SDK version 1.x.x. See [here](https://docs.hyperwallet.com/content/updates/v1/rest-api-v4) to learn From 8bffd24719926821409667795017ca74c150f609 Mon Sep 17 00:00:00 2001 From: Anand Rajakumaran <54293891+raanand-hw@users.noreply.github.com> Date: Wed, 4 Jan 2023 11:33:47 -0800 Subject: [PATCH 4/4] Update main.yml --- .github/workflows/main.yml | 81 ++++++++++++++++---------------------- 1 file changed, 33 insertions(+), 48 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index ead2e3661..734305192 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -1,61 +1,46 @@ -name: Black Duck +name: "Synopsys Intelligent Security Scan" -# Run Rapid Scan on all pull requests and pushes to a main branch on: - # Run Black Duck on pushes to main branches, and pull requests that are going - # to be merged to main branches. push: - branches: [ master, main ] + branches: [master] pull_request: - branches: [ master, main ] - - # Allow ad-hoc, manual invocations of the Coverity workflow. - workflow_dispatch: + branches: [master] jobs: - build: - # The type of runner that the job will run on - Black Duck can also run on Windows and macOS + security: + name: security scans runs-on: [self-hosted, linux] - # Steps represent a sequence of tasks that will be executed as part of the job steps: - # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it - - uses: actions/checkout@v2 - - - - name: Black Duck (Rapid scan) - if: ${{ github.event_name == 'pull_request' }} - uses: synopsys-sig/detect-action@main - # For pull requests, limit the feedback to policy violations newly introduced by code changes - # within the PR. This option will compare the results found in the PR scan to the results found - # in the last central full/intelligent scan, and only report the new violations. This is helpful - # to keep developers focused in their day to day on their code changes and not overwhelm them with - # findings they may not be responsible for. - env: - DETECT_BLACKDUCK_RAPID_COMPARE_MODE: BOM_COMPARE_STRICT - # You can use this option to configure a CA cert if using a self-hosted runner and self-signed - # certificates on your Hub server. This option should point to a file on the local filesystem - # with the CA chain cert - #env: - # NODE_EXTRA_CA_CERTS: ${{ secrets.LOCAL_CA_CERT_PATH }} - with: - scan-mode: RAPID - github-token: ${{ secrets.GITHUB_TOKEN }} - detect-version: 7.12.0 - blackduck-url: ${{ secrets.BLACKDUCK_URL }} - blackduck-api-token: ${{ secrets.BLACKDUCK_API_TOKEN }} + - name: Checkout repository + uses: actions/checkout@v2 + + - name: Setup Java + uses: actions/setup-java@v1 + with: + java-version: 11 - - name: Black Duck (Full scan) - if: ${{ github.event_name != 'pull_request' }} - uses: synopsys-sig/detect-action@main - # You can use this option to configure a CA cert if using a self-hosted runner and self-signed - # certificates on your Hub server. This option should point to a file on the local filesystem - # with the CA chain cert - #env: - # NODE_EXTRA_CA_CERTS: ${{ secrets.LOCAL_CA_CERT_PATH }} - with: - scan-mode: INTELLIGENT + - name: Run Synopsys Detect + uses: synopsys-sig/detect-action@v0.3.4 + with: + scan-mode: RAPID + detect-blackduck-rapid-compare-mode: BOM_COMPARE_STRICT + project-name: hyperwallet-program-portal + project-version-name: 1.0.0 github-token: ${{ secrets.GITHUB_TOKEN }} - detect-version: 7.12.0 + detect-version: 7.9.0 blackduck-url: ${{ secrets.BLACKDUCK_URL }} blackduck-api-token: ${{ secrets.BLACKDUCK_API_TOKEN }} + cleanup: false + env: + #DETECT_BLACKDUCK_RAPID_COMPARE_MODE: BOM_COMPARE_STRICT + #DETECT_PROJECT_GROUP_NAME: PayPalBU-Venmo + LOGGING_PROJECT_GROUP_NAME: DEBUG + LOGGING_LEVEL_COM_SYNOPSYS_INTEGRATION: DEBUG + #DETECT_PROJECT_USER_GROUPS: PP_SSO_BLACKDUCK_USER,PP_SSO_BLACKDUCK_ADMIN,PP_SSO_BLACKDUCK_SECURITY_CHAMPION + DETECT_DETECTOR_SEARCH_CONTINUE: TRUE #Will search all subdirectories for build files + DETECT_POLICY_CHECK_FAIL_ON_SEVERITIES: BLOCKER,CRITICAL #This will fail the scan only if BLOCKERS and CRITICALS + DETECT_EXCLUDED_DIRECTORIES: "'DevRunner,*Test*,*test*,*mock*,build,docs,spec,docker,config,tasks,*locale*,*Locale*,*Content*,*content*,public,templates,documentation,*temp*,*tmp*,.repository,.github,.git'" #Exclude these dirs from the scan + DETECT_PARALLEL_PROCESSORS: 0 + DETECT_PROJECT_NAME: hyperwallet-program-portal + DETECT_PROJECT_VERSION_NAME: 1.0.0