search

ShiftLeftSecurity / sast-scan

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.
https://discord.gg/DCNxzaeUpd
Apache License 2.0
796 stars 110 forks source link

Testing infrastructure for windows #193

Open prabhu opened 4 years ago

prabhu commented 4 years ago

It is quite possible that scan is either completely broken or not working well on Windows. Ever since I moved away from using Windows 10 to Linux mint scan is not getting any windows testing. Both Azure and GitHub actions windows agents do not currently support running Linux containers on Windows.

This ticket would track any custom infrastructure required to bring back Windows testing.

gitnachogo commented 4 years ago

As an addition, I've tested from the Windows Powershell to scan HelloShiftLeft using the following command:

docker run --rm -e "WORKSPACE=$(pwd)" -e "SCAN_DEBUG_MODE=debug"-e "GITHUB_TOKEN=HARDCODED_GITHUB_TOKEN_HERE" -v "$(pwd):/app" shiftleft/scan scan --type java --build

And here the results, where the only file created is class-report.xml: image Hope this helps a bit!!