run-wss-scans.yml

name: Run WS Scans

on:
  workflow_dispatch:
    inputs:
      path:
        description: >
          The path of the specific project to scan. This defaults to empty string, triggering
          a scan for all projects.
        default: ''
  schedule:
  - cron: "0 19 * * 1" # Run at 11:00 AM PST on Monday

jobs:
  run-wss-scans:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@f095bcc56b7c2baf48f3ac70d6d6782f4f553222

    - uses: ./.github/actions/setup-wss-env

    - name: Run WS Scan - Java SecureMemory
      uses: ./.github/actions/run-wss-scan
      if: ${{ !github.event.inputs.path || github.event.inputs.path == 'java/secure-memory' }}
      with:
        path: java/secure-memory
        wssProject: asherah-java-secure-memory
        wssApiKey: ${{ secrets.WSS_API_KEY }}

    - name: Run WS Scan - Java AppEncryption
      uses: ./.github/actions/run-wss-scan
      if: ${{ !github.event.inputs.path || github.event.inputs.path == 'java/app-encryption' }}
      with:
        path: java/app-encryption
        wssProject: asherah-java-app-encryption
        wssApiKey: ${{ secrets.WSS_API_KEY }}

    - name: Run WS Scan - C# SecureMemory
      uses: ./.github/actions/run-wss-scan
      if: ${{ !github.event.inputs.path || github.event.inputs.path == 'csharp/SecureMemory' }}
      with:
        path: csharp/SecureMemory
        wssProject: asherah-csharp-secure-memory
        wssApiKey: ${{ secrets.WSS_API_KEY }}

    - name: Run WS Scan - C# AppEncryption
      uses: ./.github/actions/run-wss-scan
      if: ${{ !github.event.inputs.path || github.event.inputs.path == 'csharp/AppEncryption' }}
      with:
        path: csharp/AppEncryption
        wssProject: asherah-csharp-app-encryption
        wssApiKey: ${{ secrets.WSS_API_KEY }}

    - name: Run WS Scan - Go SecureMemory
      uses: ./.github/actions/run-wss-scan
      if: ${{ !github.event.inputs.path || github.event.inputs.path == 'go/securememory' }}
      with:
        path: go/securememory
        wssProject: asherah-go-secure-memory
        wssApiKey: ${{ secrets.WSS_API_KEY }}

    - name: Run WS Scan - Go AppEncryption
      uses: ./.github/actions/run-wss-scan
      if: ${{ !github.event.inputs.path || github.event.inputs.path == 'go/appencryption' }}
      with:
        path: go/appencryption
        wssProject: asherah-go-app-encryption
        wssApiKey: ${{ secrets.WSS_API_KEY }}