GitHub action for scan repository using threat-agent docker image. Can be incorporated in GitHub workflow as a separate step or as a part of reusable workflow. See example below.
jobs:
scan-repository:
uses: threatrix/threat-agent-scan/.github/workflows/scan-repo-reusable.yaml@master- eid - EntityID: from user profile
- oid - OrganizationID from user profile
- server-url - Threatrix API url
- api-token - API Key: from user profile
- scm-token: - SCM authorization token
- app-name - Project Name
- branch - Current branch
- eid - EntityID: from user profile
- oid - OrganizationID from user profile
- TOKEN - GitHub token for target repository
- THREATRIX_SERVER_API_KEY - API Key: from user profile
Also, as an option, values for EID and OID can be passed as secrets.
- THREATRIX_EID
- THREATRIX_OID