mercedes-benz / sechub

SecHub provides a central API to test software with different security tools.
https://mercedes-benz.github.io/sechub/
MIT License
259 stars 58 forks source link

Action: Add `defineFalsePositives` functionality #3244

Open sven-dmlr opened 1 week ago

sven-dmlr commented 1 week ago

Situation

Currently there is no way to define false positives via the Github "scan" action.

Wanted

Add an optional parameter define-false-positives-from-file: '<filename>.json' Example: define-false-positives-from-file: 'sechub-false-positives.json'

When set then before scanning the action runs the SecHub client: sechub -file "<filename>.json" defineFalsePositives

When unset then this step is skipped.