CodeSweep Github Action

1. After logging into ASoC, go to the API page to generate your API key/secret pair. These must be used in the asoc_key and asoc_secret parameters for the action. Store these parameters as secrets in your repository.
2. Ensure that the Workflow permissions for your repository are set to Read and write permissions. This allows CodeSweep to scan your files and create checkruns and annotations for the issues it finds. Access these settings at Settings > Actions > General.
3. To scan code changes when a pull request is opened, add the following file to your repository under .github/workflows/codesweep.yml or update an existing workflow file:

   name: "HCL AppScan CodeSweep"
   on:
     pull_request:
       types: [opened,synchronize]
   jobs:
     scan:
       runs-on: ubuntu-latest
       steps:
         - name: Checkout
           uses: actions/checkout@v1
         - name: Run AppScan CodeSweep
           uses: HCL-TECH-SOFTWARE/appscan-codesweep-action@v2
           with:
             asoc_key: ${{secrets.ASOC_KEY}}
             asoc_secret: ${{secrets.ASOC_SECRET}}
       env: 
         GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

   Note: If you use checkout@v2 or later you must set fetch-depth to 0. For example:

   uses: actions/checkout@v2
   with:
     fetch-depth: 0

4. To publish security issues to ASoC when a pull request is merged, add the following file to your repository under .github/workflows/codesweep_publish.yml or update an existing workflow file:

   name: "HCL AppScan CodeSweep"
   on:
     pull_request:
       types: [closed]
   jobs:
     publish:
       runs-on: ubuntu-latest
       steps:
         - name: Publish issues to ASoC
           uses: HCL-TECH-SOFTWARE/appscan-codesweep-action@v2
           with:
             asoc_key: ${{secrets.ASOC_KEY}}
             asoc_secret: ${{secrets.ASOC_SECRET}}
             publish_on_merge: true
             application_id: <your ASoC application ID>
       env: 
         GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

with:
  status: failure

with:
  publish_on_merge: true
  application_id: 6c058381-17ca-e711-8de5-002590ac753d
  issue_status: "inprogress"
  scan_base_name: "CodeSweep"
  personal_scan: true