Skip to content

build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0 #176

build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0

build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0 #176

Workflow file for this run

name: SAST (Static Application Security Testing)
on:
push:
branches: [master, main]
pull_request:
branches: [master, main]
jobs:
polaris:
name: polaris / code-scan
continue-on-error: true
runs-on: ubuntu-latest
if: (github.repository_owner == 'contentful') && (endsWith(github.actor, '[bot]') == false)
steps:
- name: Clone repo
uses: actions/checkout@v4 # v4
with:
fetch-depth: 0
- name: Synopsys Polaris
uses: contentful/polaris-action@master
with:
github_token: ${{ secrets.GITHUB_TOKEN }}
polaris_url: ${{ secrets.POLARIS_SERVER_URL }}
polaris_access_token: ${{ secrets.POLARIS_ACCESS_TOKEN }}
debug: true
polaris_command: analyze -w --coverity-ignore-capture-failure
security_gate_filters: '{ "severity": ["High", "Medium"] }'
fail_on_error: false
report_url: "https://github.com/contentful/security-tools-config/issues/new?title=False%20positive%20in%20Polaris"