checkmarx-ts / checkmarx-github-action

Checkmarx Scan Github Action

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

OSA report cannot be parsed to create issue

GregoireW opened this issue · comments

If I execute an OSA scan and ask for issue creation, this is failing.

This is because the file is created as report/CxOSASummary.json, report/CxOSALibraries.json and report/CxOSAVulnerabilities.json but the osareport code try to open the file without the .json suffix :

const DEFAULT_OSA_VULNERABILITIES_FILE_NAME = "CxOSAVulnerabilities"

let issuesJsonPath = osaReportsPath + path.sep + DEFAULT_OSA_VULNERABILITIES_FILE_NAME

(and the same for the 2 other files)

@GregoireW please try:
uses: checkmarx-ts/checkmarx-github-action@master

and let me know if that works

@miguelfreitas93 This is now fixed. Thank you (Note: I had a parameter cxOsaJson but I had to remove it for this to work)