Skip to content

PRODSEC-1585 testing wiz dir scan #12592

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 11 commits into from
Aug 11, 2025
23 changes: 13 additions & 10 deletions .github/workflows/maven-master-pulls.yml
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,18 @@ jobs:
- name: Build with Maven
run: mvn -B -U verify --file pom.xml

- name: Check local context
run: |
matches=$(find . -type d -name "target")
if [ -n "$matches" ]; then
echo "Target directory found at:"
echo "$matches"
else
echo "Target directory does not exist."
echo "$PWD"
exit 1
fi

- name: Download Wiz CLI
run: curl -o wizcli https://downloads.wiz.io/wizcli/latest/wizcli-linux-amd64 && chmod +x wizcli

Expand All @@ -42,18 +54,9 @@ jobs:
WIZ_CLIENT_SECRET: ${{ secrets.WIZ_CLIENT_SECRET }}

- name: Scan Maven build directory with Wiz
run: |
./wizcli dir scan \
--path . \
--policy "$POLICY" \
--tag repo="${{ github.repository }}" \
--tag commit="${{ github.sha }}" \
--tag java="${{ matrix.java }}" > /dev/null 2>&1
env:
POLICY: "SmartBear default vulnerabilities policy"
run: ./wizcli dir scan --path ./ --tag java="${{ matrix.java }}"

build-java8:

runs-on: ubuntu-latest
strategy:
matrix:
Expand Down
Loading