Skip to content

test: add Checkmarx One scan workflow for public repo testing - #2

Open
cx-shrinil-modhave wants to merge 1 commit into
mainfrom
AST-177880/cx-one-scan-test
Open

cx-shrinil-modhave wants to merge 1 commit into
mainfrom
AST-177880/cx-one-scan-test

Conversation

@cx-shrinil-modhave

Copy link
Copy Markdown

Added CX-one Scan workflow

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@cx-shrinil-modhave
cx-shrinil-modhave requested a review from a team as a code owner September 10, 2026 07:53
@stepsecurity-app

stepsecurity-app Bot commented Sep 10, 2026

Copy link
Copy Markdown

Resolved — a later workflow run passed this policy check.

Original alert (resolved)

Security Policy Alert: Secret Policy Violation

This workflow run has been blocked by StepSecurity's secrets policy because it accesses secrets and the workflow file differs from the default branch.

Secret references detected:

  • secrets.AST_RND_SCANS_BASE_URI at line 32
  • secrets.AST_RND_SCANS_TENANT at line 33
  • secrets.AST_RND_SCANS_CLIENT_ID at line 34
  • secrets.AST_RND_SCANS_CLIENT_SECRET at line 35

To approve this workflow, please add the workflows-approved label to this PR.

Note: The label must be added by someone other than the PR author (cx-shrinil-modhave) or automation bots to ensure proper security review.

After the label is added, you can re-run the blocked workflow to proceed.

This workflow will be automatically approved once merged into the default branch.

For more information, see StepSecurity's Secret Exfiltration Policy documentation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants