SCAN-5857 : Update to look for new vulns only on non default branch. (#10)

* SCAN-5857 : Update to look for new vulns only on non default branch.

* SCAN-5857 : Use local scanner version 1.1.7.

* SCAN-5857 : Use latest packages.

* [Auto] Image tag updated latest pushed version

---------

Co-authored-by: Github <[email protected]>

Author: steviemul

.eslintrc.json

@@ -49,6 +49,9 @@ runs:
         git config --global user.name 'Github'
         git config --global user.email '[email protected]'
 
+        git pull
+
         yq e ".runs.image = env(IMAGE_TAG)" -i action.yml
+
         git add action.yml
         git diff-index --quiet HEAD || (git commit -m "[Auto] Image tag updated latest pushed version" && git push)

.github/actions/build-image/action.yaml

@@ -1,7 +1,7 @@
-FROM alpine:3.19
+FROM alpine:3.21.3
 
 RUN apk upgrade && \
-  apk add nodejs npm openjdk11-jre-headless tar
+  apk add nodejs npm openjdk11-jre-headless tar zstd
 
 COPY package.json /contrast-local-scanner/package.json
 RUN cd /contrast-local-scanner && npm i --production

Dockerfile

@@ -4,7 +4,7 @@ This GitHub action lets you use Contrast Local Scanner to detect vulnerabilities
 
 ## Local Scan Engine
 
-The github action uses Contrast local scan engine version 1.1.6.
+The github action uses Contrast local scan engine version 1.1.7.
 
 Release notes for the local scan engine can be viewed here [Scan Release Notes](https://docs.contrastsecurity.com/en/scan-release-notes-and-archive.html)
 

README.md

@@ -40,6 +40,9 @@ inputs:
   memory:
     description: Memory setting passed to the underlying scan engine. Defaulted to 8g
     required: false
+  new:
+    description: Set this to true or false to only fail the action on new vulnerabilities. This defaults to true when on a non default branch.
+    required: false
   path:
     description: Path to scan with local scanner. Defaults to the current repository path.
     required: false
@@ -71,4 +74,4 @@ inputs:
     default: ${{ github.token }}
 runs:
   using: 'docker'
-  image: 'docker://ghcr.io/contrast-security-oss/contrast-local-scan-action:sha-ac9a938bf17b9f140d7fb3b52d9d21619cec40e6'
+  image: 'docker://ghcr.io/contrast-security-oss/contrast-local-scan-action:sha-350bfa17e35bc1f0e4432a0fe1ba344e0ed5f5a8'

action.yml

@@ -0,0 +1,30 @@
+import { defineConfig } from "eslint/config";
+import globals from "globals";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import js from "@eslint/js";
+import { FlatCompat } from "@eslint/eslintrc";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const compat = new FlatCompat({
+    baseDirectory: __dirname,
+    recommendedConfig: js.configs.recommended,
+    allConfig: js.configs.all
+});
+
+export default defineConfig([{
+    extends: compat.extends("eslint:recommended", "prettier"),
+
+    languageOptions: {
+        globals: {
+            ...globals.node,
+        },
+
+        ecmaVersion: "latest",
+        sourceType: "module",
+    },
+    rules: {
+        "no-unused-vars": "off",
+    }
+}]);