prepped advanced pipe

.github/workflows/oss_pygoat-devsecops-advanced.yml

@@ -120,7 +120,7 @@ jobs:
         run: |-
           echo "testing action"
           # get token from common user 
-          echo "DEFECTDOJO_COMMONUSER: ${{ env.DEFECTDOJO_COMMONUSER }}"         
+          echo "DEFECTDOJO_COMMONUSER: ${{ env.DEFECTDOJO_COMMONUSER }}"
           echo "DEFECTDOJO_COMMONPASSWORD: ${{ secrets.DEFECTDOJO_COMMONPASSWORD }}"
           # throw error if token is not set
           if [ -z "${{ secrets.DEFECTDOJO_COMMONPASSWORD }}" ]; then
@@ -194,10 +194,44 @@ jobs:
       - name: Push Docker image ${{ env.image }}:latest
         if: env.pushDockerImage == 'true'
         run: docker push ${{ env.image }}:latest
+  devsecops-tasks:
+    name: Do DevSecOps Tasks
+    needs:
+      - build-build_and_push_app
+    runs-on: ubuntu-latest
+    environment:
+      name: dev
+    steps:
+      - name: checkout
+        uses: actions/[email protected]
+      - name: Gitleaks
+        continue-on-error: true
+        # You may pin to the exact commit or the version.
+        # uses: gitleaks/gitleaks-action@e6dab246340401bf53eec993b8f05aebe80ac636
+        uses: gitleaks/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.
+      - name: Depcheck
+        uses: dependency-check/Dependency-Check_Action@main
+        id: Depcheck
+        with:
+          project: 'test'
+          path: '.'
+          format: 'HTML'
+          out: 'reports' # this is the default, no need to specify unless you wish to override it
+          args: >
+            --failOnCVSS 7
+            --enableRetired
+      - name: Upload Test results
+        uses: actions/upload-artifact@master
+        with:
+           name: Depcheck report
+           path: ${{github.workspace}}/reports
   test-run_devopsshield_scan_linux:
     name: Run DevOps Shield Scan Linux
     needs:
-      - build-build_and_push_app
+      - devsecops-tasks
     runs-on: ubuntu-latest
     environment:
       name: dev
@@ -288,7 +322,7 @@ jobs:
   test-run_sca_analysis:
     name: Run SCA Analysis
     needs:
-      - build-build_and_push_app
+      - devsecops-tasks
     runs-on: ubuntu-latest
     env:
       image: ${{ vars.DOCKER_USERNAME }}.azurecr.io/devsecops-pygoat
@@ -338,7 +372,7 @@ jobs:
   test-run_unit_tests:
     name: Run Unit Tests
     needs:
-      - build-build_and_push_app
+      - devsecops-tasks
     runs-on: ubuntu-latest
     steps:
       - name: checkout
@@ -363,7 +397,7 @@ jobs:
   test-run_sast_analysis:
     name: Run SAST Analysis
     needs:
-      - build-build_and_push_app
+      - devsecops-tasks
     runs-on: ubuntu-latest
     steps:
       - name: checkout
@@ -712,6 +746,7 @@ jobs:
       - name: checkout
         uses: actions/[email protected]
       - name: download artifact
+        if: false
         uses: actions/[email protected]
       - uses: actions/[email protected]
       - uses: cschleiden/replace-tokens@v1
@@ -886,6 +921,7 @@ jobs:
       - name: checkout
         uses: actions/[email protected]
       - name: download artifact
+        if: false
         uses: actions/[email protected]
       - uses: actions/[email protected]
       - uses: cschleiden/replace-tokens@v1