-
Notifications
You must be signed in to change notification settings - Fork 321
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
docs(integrations): add CircleCI integration example
Signed-off-by: Rogério Peixoto <[email protected]>
- Loading branch information
1 parent
51f283a
commit 83f6bae
Showing
7 changed files
with
69 additions
and
1 deletion.
There are no files selected for viewing
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,47 @@ | ||
# Running KICS in CircleCI | ||
|
||
You can integrate KICS into your CircleCI workflows. | ||
|
||
This document provides you with an example on how to run KICS scans in a pipeline. | ||
|
||
## Example setup with GitHub: | ||
|
||
Enable CircleCI to access your personal profile or GitHub organization. | ||
|
||
Create a `.circleci` directory in your project's root and place a `config.yaml` inside: | ||
|
||
```yaml | ||
version: 2.1 | ||
jobs: | ||
kics: | ||
docker: | ||
- image: checkmarx/kics:latest-alpine | ||
steps: | ||
- checkout | ||
- run: | ||
name: Run KICS | ||
command: | | ||
/app/bin/kics scan -p ${PWD} -o ~/results.json --ci | ||
- store_artifacts: | ||
path: ~/results.json | ||
|
||
workflows: | ||
version: 2 | ||
build: | ||
jobs: | ||
# etc... | ||
- kics | ||
|
||
``` | ||
|
||
After running a pipeline you will be able to see the Run KICS step inside the workflow details: | ||
|
||
<img src="https://raw.githubusercontent.com/Checkmarx/kics/master/docs/img/circleci-build.png" width="850"> | ||
|
||
Go to the artifacts tab to inspect the results: | ||
|
||
<img src="https://raw.githubusercontent.com/Checkmarx/kics/master/docs/img/circleci-artifacts.png" width="850"> | ||
|
||
The results will be displayed in plain text: | ||
|
||
<img src="https://raw.githubusercontent.com/Checkmarx/kics/master/docs/img/circleci-results.png" width="850"> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,20 @@ | ||
version: 2.1 | ||
jobs: | ||
kics: | ||
docker: | ||
- image: checkmarx/kics:latest-alpine | ||
steps: | ||
- checkout | ||
- run: | ||
name: Run KICS | ||
command: | | ||
/app/bin/kics scan -p ${PWD} -o ~/results.json --ci | ||
- store_artifacts: | ||
path: ~/results.json | ||
|
||
workflows: | ||
version: 2 | ||
build: | ||
jobs: | ||
# etc... | ||
- kics |