In GitHub, select the project you would like to integrate Reshift with. To create an action click 'actions' and set up the workflow with your language card.

1. Create a Secret

First, create a secret in the GitHub 'settings' tab. Give the secret a name (RESHIFT_TOKEN for this example), and paste your scan token as the value.

2. Configure your Workflow

Add a .yml file to the base directory of your code repository to configure GitHub Actions to run Reshift scans. You're file should look like this.

name: Reshift Security Scan
​
on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]
​
jobs:
  build:
​
    runs-on: ubuntu-latest
​
    steps:
    - uses: actions/[email protected]
    - name: Set up JDK 1.8
      uses: actions/[email protected]
      with:
        java-version: 1.8
    - name: Build with Maven
      run: mvn [REPLACE THIS WITH MAVEN COMMAND FROM RESHIFT INTEGRATIONS PAGE]

**add other scans pertaining to your language

3. Start a Commit

Click 'start commit' to kick off the Reshift Scan. Results will be updated and reflected on your Reshift Dashboard.

If you have any more questions, please email us at [email protected]!

​

​

​

​