diff --git a/.github/workflows/apisec-scan.yml b/.github/workflows/apisec-scan.yml index 3006375..2c4568d 100644 --- a/.github/workflows/apisec-scan.yml +++ b/.github/workflows/apisec-scan.yml @@ -1,17 +1,20 @@ +name: APIsec Scan +on: + pull_request: + +jobs: + apisec_scan: + runs-on: ubuntu-latest steps: - - name: APIsec scan - uses: apisec-inc/apisec-run-scan@025432089674a28ba8fb55f8ab06c10215e772ea - with: - # The APIsec username with which the scans will be executed + - name: APIsec scan + uses: apisec-inc/apisec-run-scan@025432089674 + with: apisec-username: ${{ secrets.apisec_username }} - # The Password of the APIsec user with which the scans will be executed - apisec-password: ${{ secrets.apisec_password}} - # The name of the project for security scan + apisec-password: ${{ secrets.apisec_password }} apisec-project: "VAmPI" - # The name of the sarif format result file The file is written only if this property is provided. sarif-result-file: "apisec-results.sarif" - - name: Import results - uses: github/codeql-action/upload-sarif@v3 - with: + - name: Import results + uses: github/codeql-action/upload-sarif@v3 + with: sarif_file: ./apisec-results.sarif diff --git a/package-lock.json b/package-lock.json index 9d0ed3f..d8b0a00 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7,6 +7,7 @@ "": { "name": "scripts-deploy", "version": "1.0.0", + "hasInstallScript": true, "license": "ISC", "dependencies": { "@nomicfoundation/hardhat-chai-matchers": "^2.1.0", @@ -15,7 +16,7 @@ "ethers": "^6.15.0" }, "devDependencies": { - "@nomicfoundation/hardhat-toolbox": "^6.1.0", + "@nomicfoundation/hardhat-toolbox": "latest", "@openzeppelin/contracts": "^5.4.0", "hardhat": "^3.0.3" }