Stackhawk

.github/workflows/nightly.yml

@@ -79,3 +79,30 @@ jobs:
           GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           ANALYTICS_KEY: ${{ secrets.ANALYTICS_KEY }}
+
+  stackhawk:
+    name: HawkScan
+    runs-on: ubuntu-latest
+    needs: release
+    services:
+      flipt:
+        image: flipt/flipt:nightly # <-- this is the image name from the previous job
+        ports:
+          - 8080:8080
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Download OpenAPI Spec
+        run: |
+          curl -s -o openapi.yml https://raw.githubusercontent.com/flipt-io/flipt-openapi/main/openapi.yml
+
+      - name: Update HawkScan Configuration
+        uses: mikefarah/yq@master
+        with:
+          cmd: yq -i '.app.env = "Nightly"' stackhawk.yml
+
+      - name: Run HawkScan
+        uses: stackhawk/hawkscan-action@v2.0.1
+        with:
+          apiKey: ${{ secrets.HAWK_API_KEY }}

stackhawk.yml

@@ -0,0 +1,18 @@
+# -- stackhawk configuration for Flipt --
+app:
+  applicationId: 5ee57432-1f9f-44fb-9e65-c17c65a4ade6 # (required)
+  env: Development # (required)
+  host: http://localhost:8080 # (required)
+  openApiConf:
+    filePath: openapi.yml # (required)
+
+# -- Customized Configuration for GraphQL/SOAP/OpenAPI, add here --
+# Configuration Docs: https://docs.stackhawk.com/hawkscan/configuration/
+
+# -- If Authenticated Scanning is needed, add here --
+# Authenticated Scanning Docs: https://docs.stackhawk.com/hawkscan/authenticated-scanning.html
+# Authenticated Scanning Repo: https://github.com/kaakaww/scan-configuration/tree/main/Authentication
+
+# -- Help Section --
+# Docs: https://docs.stackhawk.com/
+# Contact Support: support@stackhawk.com