From 496ba29b22f529bea90f5f6bdf54f8d2c63ae8ac Mon Sep 17 00:00:00 2001 From: svc-rat-appsec Date: Sun, 14 Jul 2024 05:48:00 +0000 Subject: [PATCH] APPSECTOOLS-28032 Sec Onboard: Code Analysis Onboarding --- .security_config/security_config.yaml | 28 +++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 .security_config/security_config.yaml diff --git a/.security_config/security_config.yaml b/.security_config/security_config.yaml new file mode 100644 index 0000000..462c2fe --- /dev/null +++ b/.security_config/security_config.yaml @@ -0,0 +1,28 @@ +# yaml-language-server: $schema=https://security-api.appsec.inday.io/schemas/security_config.json +# This is the configuration file for Chimera. This file is required to allow scanning platform to scan your repo. +# Please see https://confluence.workday.com/pages/viewpage.action?pageId=1943985516 + +##################### +# CHANGE LOG +##################### +# (re)adding code analysis service webhook: seeking approval on pr [placeholder] +# (re)adding code analysis service ac svc-secapi-appsec: seeking approval on pr [placeholder1] + +##################### +# SLACK CONFIGURATION +##################### +# Uncomment the below section and provide a Slack channel's name to allow Chimera to +# notifiy your slack channel about scans. Please see Chimera documentation on how to do this. +#slack: + #enabled: true + #channel: + +########################## +# SCAN TOOL CONFIGURATION +########################## +tools_config: + semgrep: + rulesets: [] + snyk: {} + trufflehog: {} + checkov: {}