sast-horusec action sample.

0xtiago · Jul 23, 2024 · 26872a2 · 26872a2
1 parent 4ff8942
commit 26872a2
Show file tree

Hide file tree

Showing 3 changed files with 45 additions and 4 deletions.
diff --git a/.github/workflows/sast-horusec-vampi.yml b/.github/workflows/sast-horusec-vampi.yml
@@ -8,9 +8,12 @@ jobs:
   run-scripts:
     runs-on: ubuntu-latest
 
-    name: Horusec Scan
+
+
     steps:
-      - uses: actions/checkout@v3
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
       - name: SAST - Horusec Run 🐞
         run: |
           ls -R
@@ -28,7 +31,7 @@ jobs:
         uses: actions/upload-artifact@v3
         with:
           name: SAST - Horusec Scan
-          path: reports/horusec_report.md
+          path: ./targets/apps/VAmPI-master/reports/horusec_report.md
 
       - name: SAST - Horusec Results In Summary 💁🏽
         run: cat ./targets/apps/VAmPI-master/reports/horusec_report.md >> $GITHUB_STEP_SUMMARY

diff --git a/targets/apps/VAmPI-master/trigger.txt b/targets/apps/VAmPI-master/trigger.txt
@@ -1 +1 @@
-trigger
+trigger!
diff --git a/tools/horusec/sast-horusec.yml b/tools/horusec/sast-horusec.yml
@@ -0,0 +1,38 @@
+name: Run Horusec (SAST), Generate Script and Save Artifact
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  run-scripts:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: SAST - Horusec Run 🐞
+        run: |
+          curl -sL https://raw.githubusercontent.com/0xtiago/opensource-devsecops/main/tools/horusec/horusec_linux.sh| bash
+
+      - name: SAST - Horusec Report Generation 📊
+        run: | 
+          cd reports
+          pip install -r https://raw.githubusercontent.com/0xtiago/opensource-devsecops/main/tools/horusec/horusec_json2md/requirements.txt
+          curl -sL https://raw.githubusercontent.com/0xtiago/opensource-devsecops/main/tools/horusec/horusec_json2md/horusec_json2md.py  -o horusec_json2md.py 
+          python3 horusec_json2md.py horusec_report.json horusec_report.md
+
+
+      - name: SAST - Horusec Upload Report Artifact 💾
+        uses: actions/upload-artifact@v3
+        with:
+          name: SAST - Horusec Scan
+          path: reports/horusec_report.md
+
+      - name: SAST - Horusec Results In Summary 💁🏽
+        run: cat reports/horusec_report.md >> $GITHUB_STEP_SUMMARY