sast.yaml

name: SAST
on:
  workflow_dispatch:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main
    types:
      - opened
      - synchronize
jobs:
  boost_security_sast:
    name: SAST / Scanner
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v2
      - name: Scanner
        uses: boostsecurityio/boostsec-scanner-github@v3
        with:
          action: scan
          api_token: ${{ secrets.BOOST_API_TOKEN }}
          api_endpoint: https://api.dev.boostsec.io

  brakeman:
    name: Boost Brakeman Scanner
    env:
      BOOST_SCANNER_REGISTRY_REPO_DEV: https://github.com/boostsecurityio/scanner-testing
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Boost Brakeman Scanner
        uses: boostsecurityio/boostsec-scanner-github@v4
        with:
          registry_module: scanners/boostsecurityio/brakeman
          api_token: ${{ secrets.BOOST_API_TOKEN }}
          api_endpoint: https://api.dev.boostsec.io