diff --git a/.gitea/workflows/codeant.yml b/.gitea/workflows/codeant.yml index 7713fd1..468df26 100644 --- a/.gitea/workflows/codeant.yml +++ b/.gitea/workflows/codeant.yml @@ -6,7 +6,7 @@ on: pull_request: branches: ["main"] schedule: - - cron: "0 0 * * *" + - cron: "0 0 * * *" # Daily Scan workflow_dispatch: jobs: @@ -18,19 +18,27 @@ jobs: with: fetch-depth: 0 - - name: Setup Node.js + - name: Setup Node.js (Satisfies Engine Requirements) uses: actions/setup-node@v3 with: - node-version: '20' + node-version: '22' # Using Node 22 to avoid EBADENGINE errors - name: Install CodeAnt CLI - run: npm install -g codeant-cli + run: npm install -g @codeant-cli - - name: Run CodeAnt Scan + - name: Run CodeAnt Analysis env: - # IMPORTANT: Use this EXACT variable name + # The CLI uses this for non-interactive auth CODEANT_API_TOKEN: ${{ secrets.CODEANT_API_KEY }} run: | - # We use the universal 'scan' command which covers - # Secrets, SAST, and Quality in one go. - codeant scan --all --fail-on-severity HIGH \ No newline at end of file + echo "Checking CodeAnt Version..." + codeant --version + + echo "1. Scanning for Secrets..." + codeant secrets --all --fail-on HIGH + + echo "2. Running Security Analysis (Vulnerabilities)..." + codeant security-analysis --all --fail-on HIGH + + echo "3. Running Static Analysis (Quality & Bugs)..." + codeant static-analysis --all --fail-on CRITICAL \ No newline at end of file