diff --git a/.checkmarx/config.yaml b/.checkmarx/config.yaml deleted file mode 100644 index 4c45b32..0000000 --- a/.checkmarx/config.yaml +++ /dev/null @@ -1,16 +0,0 @@ -version: 1 - -checkmarx: - scan: - #optional - tags: - "fromConfig": "true" - - project: - tags: - "fromConfig": "true" - - configs: - sast: - presetName: 'Checkmarx Default' - incremental: 'true' diff --git a/.github/workflows/cx.yml b/.github/workflows/cx.yml index b807343..d91f0cf 100644 --- a/.github/workflows/cx.yml +++ b/.github/workflows/cx.yml @@ -1,24 +1,25 @@ name: cx + on: pull_request: branches: - master -# push: + push: + branches: + - master + jobs: ast_scan: runs-on: ubuntu-latest name: Checkmarx scan run + steps: - - name: Run scan - uses: CheckmarxDev/ast-github-action@more_engines - id: scan + - name: Checkout code + uses: actions/checkout@v2 + - name: Checkmarx AST CLI Action + uses: checkmarx/ast-github-action@main with: - github_repo_token: ${{ secrets.GITHUB_TOKEN }} - ast_uri: ${{ secrets.AST_URI }} - ast_access_key_id: ${{ secrets.AST_ACCESS_KEY_ID }} - ast_access_key_secret: ${{ secrets.AST_ACCESS_KEY_SECRET }} - sca_user: ${{ secrets.SCA_USER }} - sca_password: ${{ secrets.SCA_PASSWORD }} - action_scan_complete_timeout_secs: 600 - high_results_threshold: 0 - medium_results_threshold: 10 + base_uri: https://us.ast.checkmarx.net/ + cx_tenant: workshop + cx_api_key: ${{ secrets.CX_API_KEY }} + diff --git a/.vscode/settings.json b/.vscode/settings.json new file mode 100644 index 0000000..e0f15db --- /dev/null +++ b/.vscode/settings.json @@ -0,0 +1,3 @@ +{ + "java.configuration.updateBuildConfiguration": "automatic" +} \ No newline at end of file diff --git a/pom.xml b/pom.xml index f6af69d..c7e3180 100644 --- a/pom.xml +++ b/pom.xml @@ -17,7 +17,7 @@ mysql mysql-connector-java - 5.1.26 + 5.2.26 org.json diff --git a/target/classes/Users.hbm.xml b/target/classes/Users.hbm.xml new file mode 100644 index 0000000..e8f5b6a --- /dev/null +++ b/target/classes/Users.hbm.xml @@ -0,0 +1,23 @@ + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file