feat: new env variable for CI

Author: YegorZh

.github/workflows/CI-appsec-blackduck-master-include_diagnostics.yml

@@ -6,11 +6,11 @@ on:
     branches:
       - main
     paths:
-      - 'build.gradle'
+      - "build.gradle"
 
 jobs:
   blackduck-scan:
-    runs-on: [ ubuntu-latest ]
+    runs-on: [ubuntu-latest]
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-java@v3
@@ -30,6 +30,9 @@ jobs:
           UNIT_API_URL: ${{ secrets.UNIT_API_URL }}
           UNIT_TOKEN: ${{ secrets.UNIT_TOKEN }}
           access_token: ${{ secrets.UNIT_TOKEN }}
+          token_tests_user_id: ${{ secrets.TOKEN_TEST_USER_ID }}
+          test_plaid_counterparty_token: ${{ secrets.TEST_PLAID_COUNTERPARTY_TOKEN }}
+          wallet_terms: ${{ secrets.WALLET_TERMS }}
 
       - name: Black Duck Full Scan
         uses: synopsys-sig/[email protected]
@@ -42,46 +45,45 @@ jobs:
           blackduck_url: ${{ secrets.BLACKDUCK_URL }}
           blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
           blackduck_scan_full: true
-  
+
           ### Accepts Multiple Values
-          blackduck_scan_failure_severities: 'BLOCKER,CRITICAL'
-  
+          blackduck_scan_failure_severities: "BLOCKER,CRITICAL"
+
           ### Uncomment below configuration to enable automatic fix pull request creation if vulnerabilities are reported
           blackduck_fixpr_enabled: true
           blackduck_fixpr_maxCount: 5
-          blackduck_fixpr_filter_severities: 'CRITICAL,HIGH'
-          blackduck_fixpr_useUpgradeGuidance: 'SHORT_TERM,LONG_TERM'
+          blackduck_fixpr_filter_severities: "CRITICAL,HIGH"
+          blackduck_fixpr_useUpgradeGuidance: "SHORT_TERM,LONG_TERM"
           github_token: ${{ secrets.GITHUB_TOKEN }} # Mandatory when blackduck_fixpr_enabled is set to 'true'
-  
+
           ### Uncomment below configuration if Synopsys Bridge diagnostic files needs to be uploaded
           include_diagnostics: true
 
       - name: If failed - Configure 1Password Service Account For Slack Webhook URL Secret
         uses: 1password/load-secrets-action/configure@v1
         if: ${{ failure() }}
         with:
-            service-account-token: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          service-account-token: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
       - name: If failed - Load Slack Webhook URL Secret
         uses: 1password/load-secrets-action@v1
         if: ${{ failure() }}
         with:
-            export-env: true
+          export-env: true
         env:
-            SLACK_WEBHOOK_URL: op://Security/slack-appsec-blackduck-alerts/webhook-url
-      - name: If failed - Report failure to Slack 
+          SLACK_WEBHOOK_URL: op://Security/slack-appsec-blackduck-alerts/webhook-url
+      - name: If failed - Report failure to Slack
         #Slack channel: appsec-blackduck-alerts
-        uses: ravsamhq/notify-slack-action@v2   
+        uses: ravsamhq/notify-slack-action@v2
         if: ${{ failure() }}
         with:
-           status: ${{ job.status }}
-           token: ${{ secrets.GITHUB_TOKEN }}
-           notification_title: "{workflow} has {status_message}"
-           message_format: "{emoji} *{workflow}* {status_message} in <{run_url}|{repo}>"
-           footer: "Linked Run <{run_url}|{repo}>"
-           notify_when: "failure"
-           mention_users: "U040AD4BT42"
-           mention_users_when: "failure,warnings"
-           mention_groups: "!channel"
+          status: ${{ job.status }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+          notification_title: "{workflow} has {status_message}"
+          message_format: "{emoji} *{workflow}* {status_message} in <{run_url}|{repo}>"
+          footer: "Linked Run <{run_url}|{repo}>"
+          notify_when: "failure"
+          mention_users: "U040AD4BT42"
+          mention_users_when: "failure,warnings"
+          mention_groups: "!channel"
         env:
-           SLACK_WEBHOOK_URL: ${{ env.SLACK_WEBHOOK_URL }}
-
+          SLACK_WEBHOOK_URL: ${{ env.SLACK_WEBHOOK_URL }}

.github/workflows/CI-appsec-blackduck-master.yml

@@ -2,18 +2,18 @@ name: CI-AppSec [Master]
 on:
   schedule:
     #At 13:00 on every day-of-week from Sunday through Thursday.
-    - cron: '0 13 * * SUN-THU'
+    - cron: "0 13 * * SUN-THU"
   workflow_dispatch:
   #The workflow will only run when a push that includes a change to the build.gradle file is made in the main branch.
   push:
     branches:
       - main
     paths:
-      - 'build.gradle'
+      - "build.gradle"
 
 jobs:
   blackduck-scan:
-    runs-on: [ ubuntu-latest ]
+    runs-on: [ubuntu-latest]
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-java@v3
@@ -30,6 +30,9 @@ jobs:
           UNIT_API_URL: ${{ secrets.UNIT_API_URL }}
           UNIT_TOKEN: ${{ secrets.UNIT_TOKEN }}
           access_token: ${{ secrets.UNIT_TOKEN }}
+          token_tests_user_id: ${{ secrets.TOKEN_TEST_USER_ID }}
+          test_plaid_counterparty_token: ${{ secrets.TEST_PLAID_COUNTERPARTY_TOKEN }}
+          wallet_terms: ${{ secrets.WALLET_TERMS }}
 
       - name: Black Duck Full Scan
         uses: synopsys-sig/[email protected]
@@ -42,46 +45,45 @@ jobs:
           blackduck_url: ${{ secrets.BLACKDUCK_URL }}
           blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
           blackduck_scan_full: true
-  
+
           ### Accepts Multiple Values
-          blackduck_scan_failure_severities: 'BLOCKER,CRITICAL'
-  
+          blackduck_scan_failure_severities: "BLOCKER,CRITICAL"
+
           ### Uncomment below configuration to enable automatic fix pull request creation if vulnerabilities are reported
           blackduck_fixpr_enabled: true
           blackduck_fixpr_maxCount: 5
-          blackduck_fixpr_filter_severities: 'CRITICAL,HIGH'
-          blackduck_fixpr_useUpgradeGuidance: 'SHORT_TERM,LONG_TERM'
+          blackduck_fixpr_filter_severities: "CRITICAL,HIGH"
+          blackduck_fixpr_useUpgradeGuidance: "SHORT_TERM,LONG_TERM"
           github_token: ${{ secrets.GITHUB_TOKEN }} # Mandatory when blackduck_fixpr_enabled is set to 'true'
-  
+
           ### Uncomment below configuration if Synopsys Bridge diagnostic files needs to be uploaded
           # include_diagnostics: true
 
       - name: If failed - Configure 1Password Service Account For Slack Webhook URL Secret
         uses: 1password/load-secrets-action/configure@v1
         if: ${{ failure() }}
         with:
-            service-account-token: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          service-account-token: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
       - name: If failed - Load Slack Webhook URL Secret
         uses: 1password/load-secrets-action@v1
         if: ${{ failure() }}
         with:
-            export-env: true
+          export-env: true
         env:
-            SLACK_WEBHOOK_URL: op://Security/slack-appsec-blackduck-alerts/webhook-url
-      - name: If failed - Report failure to Slack 
+          SLACK_WEBHOOK_URL: op://Security/slack-appsec-blackduck-alerts/webhook-url
+      - name: If failed - Report failure to Slack
         #Slack channel: appsec-blackduck-alerts
-        uses: ravsamhq/notify-slack-action@v2   
+        uses: ravsamhq/notify-slack-action@v2
         if: ${{ failure() }}
         with:
-           status: ${{ job.status }}
-           token: ${{ secrets.GITHUB_TOKEN }}
-           notification_title: "{workflow} has {status_message}"
-           message_format: "{emoji} *{workflow}* {status_message} in <{run_url}|{repo}>"
-           footer: "Linked Run <{run_url}|{repo}>"
-           notify_when: "failure"
-           mention_users: "U040AD4BT42"
-           mention_users_when: "failure,warnings"
-           mention_groups: "!channel"
+          status: ${{ job.status }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+          notification_title: "{workflow} has {status_message}"
+          message_format: "{emoji} *{workflow}* {status_message} in <{run_url}|{repo}>"
+          footer: "Linked Run <{run_url}|{repo}>"
+          notify_when: "failure"
+          mention_users: "U040AD4BT42"
+          mention_users_when: "failure,warnings"
+          mention_groups: "!channel"
         env:
-           SLACK_WEBHOOK_URL: ${{ env.SLACK_WEBHOOK_URL }}
-
+          SLACK_WEBHOOK_URL: ${{ env.SLACK_WEBHOOK_URL }}

.github/workflows/CI.yaml

@@ -27,6 +27,9 @@ jobs:
           UNIT_API_URL: ${{ secrets.UNIT_API_URL }}
           UNIT_TOKEN: ${{ secrets.UNIT_TOKEN }}
           access_token: ${{ secrets.UNIT_TOKEN }}
+          token_tests_user_id: ${{ secrets.TOKEN_TEST_USER_ID }}
+          test_plaid_counterparty_token: ${{ secrets.TEST_PLAID_COUNTERPARTY_TOKEN }}
+          wallet_terms: ${{ secrets.WALLET_TERMS }}
 
       - name: Store reports
         if: failure()