1. Navigieren Sie zu Ihrer Pipeline-YML-Datei.
2. Suchen Sie im Abschnitt „Aufgaben“ auf der rechten Seite nach der Erweiterungsaufgabe „ServiceNow DevOps-Sicherheitsergebnisse “.
3. Geben Sie den ServiceNow-Endpunkt ein.
4. Geben Sie die Sicherheitsergebnisattribute wie folgt ein.
   • Checkmarx SAST

     - task: ServiceNow-DevOps-Build-Security-Results@1
         inputs:
           connectedServiceName: "" # ServiceNow DevOps Change Velocity Service Connection
           securityResultAttributes: |
             {"scanner": "Checkmarx SAST",  "projectId": "", "securityToolId": ""}
           # scanner: Scanning tool and is required e.g. Checkmarx SAST.
           # projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
           # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmark One

     - task: ServiceNow-DevOps-Build-Security-Results@1
         inputs:
           connectedServiceName: "" # ServiceNow DevOps Change Velocity Service Connection
           securityResultAttributes: |
             {"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}
           # scanner: Scanning tool and is required e.g. Checkmarx One.
           # projectName: Name of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
           # projectId: Id of your Checkmarx One project and can be used instead of projectName field. This attribute is applicable only for Checkmarx One.
           # scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
           # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

5. Wählen Sie Hinzufügen aus, um Ihrer Pipeline den anwenderdefinierten Aktionscode hinzuzufügen.

1. Navigieren Sie aus einer konfigurierten Pipeline zur Pipeline-Syntax.
2. Wählen Sie in der Liste Beispielschritt den Schritt snDevOpsSecurityResult aus, und aktualisieren Sie die Werte für die Sicherheitsscan-Attribute im Schritt.
3. Wählen Sie Pipeline-Skript generieren aus, um ein Snippet zu erstellen. Sie können den Ausschnitt kopieren und in die Pipeline einfügen.
   • Checkmarx SAST

     snDevOpsSecurityResult securityResultAttributes: '{"scanner": "Checkmarx SAST", "projectId": "", "securityToolId": ""}'
     // scanner: Scanning tool and is required e.g. Checkmarx SAST.
     // projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
     // securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmark One

     snDevOpsSecurityResult securityResultAttributes: '{"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}'
     // scanner: Scanning tool and is required e.g. Checkmarx One.
     // projectName/projectId: Name/Id of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
     // scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
     // securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

1. Navigieren Sie zu Ihrer Workflow-YML-Datei.
2. Suchen Sie im Abschnitt Marketplace auf der rechten Seite nach der anwenderdefinierten Aktion ServiceNow DevOps-Sicherheitsergebnisse.
3. Fügen Sie Ihrer YML-Datei das folgende Snippet hinzu.
   • Checkmarx SAST

     ServiceNowSecurityScanResults:
         # jobs that must complete successfully before this job will run
         needs: build
         # type of machine to run the job on
         runs-on: ubuntu-latest
         name: ServiceNow Security Scan Results
         steps:
           - name: ServiceNow DevOps Security Results
             uses: ServiceNow/servicenow-devops-security-result@v3.0.0
             with:
                 # Devops Integration User Name
                 devops-integration-user-name: ${{ secrets.SN_DEVOPS_USER }}
                 # Devops Integration User Password
                 devops-integration-user-password: ${{ secrets.SN_DEVOPS_PASSWORD }}
                 # ServiceNow Instance URL
                 instance-url: ${{ secrets.SN_INSTANCE_URL }}
                 # Orchestration Tool Id
                 tool-id: ${{ secrets.SN_ORCHESTRATION_TOOL_ID }}
                 # GitHub Context
                 context-github: ${{ toJSON(github) }}
                 # Display Name of the Job
                 job-name: 'ServiceNow Security Scan Results'
                 security-result-attributes: '{"scanner": "Checkmarx SAST", "projectId": "", "securityToolId": ""}'
                 # scanner: Scanning tool and is required e.g. Checkmarx SAST.
                 # projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
                 # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmark One

     ServiceNowSecurityScanResults:
         # jobs that must complete successfully before this job will run
         needs: build
         # type of machine to run the job on
         runs-on: ubuntu-latest
         name: ServiceNow Security Scan Results
         steps:
           - name: ServiceNow DevOps Security Results
             uses: ServiceNow/servicenow-devops-security-result@v3.0.0
             with:
                 # Devops Integration User Name
                 devops-integration-user-name: ${{ secrets.SN_DEVOPS_USER }}
                 # Devops Integration User Password
                 devops-integration-user-password: ${{ secrets.SN_DEVOPS_PASSWORD }}
                 # ServiceNow Instance URL
                 instance-url: ${{ secrets.SN_INSTANCE_URL }}
                 # Orchestration Tool Id
                 tool-id: ${{ secrets.SN_ORCHESTRATION_TOOL_ID }}
                 # GitHub Context
                 context-github: ${{ toJSON(github) }}
                 # Display Name of the Job
                 job-name: 'ServiceNow Security Scan Results'
                 security-result-attributes: '{"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}'
                 # scanner: Scanning tool and is required e.g. Checkmarx One.
                 # projectName/projectId: Name/Id of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
                 # scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
                 # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

- stage:
    name: ServiceNow DevOps Security Result
    identifier: Security
    description: ""
    type: Custom
    spec:
      execution:
        steps:
          - stepGroup:
              name: Security
              identifier: Security
              steps:
                - step:
                    type: Run
                    name: ServiceNow DevOps Security Result
                    identifier: ServiceNow_DevOps_Security_Result
                    spec:
                      connectorRef: docker_hub_connector_for_harness
                      image: servicenowdocker/sndevops:5.0.0
                      shell: Sh
                      command: |-
                        sndevopscli create securityScan -p  

                        "{"pipelineInfo":{
                            "buildNumber":"<+stage.nodeExecutionId>",
                            "taskExecutionUrl":"<+pipeline.executionUrl>?stage=<+stage.nodeExecutionId>", 
                            "orchestrationPipeline":"<+org.identifier>/<+project.identifier>/<+pipeline.name>" 
                          },
                          "securityResultAttributes":{
				"scanner":"Veracode",
				"applicationName":"",
				"buildVersion":"",
				"securityToolId":""
                          }
                        }"
                      envVariables:
                        SNOW_URL: <+variable.SNOW_URL>
                        SNOW_TOOLID: <+variable.SNOW_TOOLID>
                        SNOW_TOKEN: <+variable.SNOW_TOKEN>
              stepGroupInfra:
                type: KubernetesDirect
                spec:
                  connectorRef: kubernates_connector
                  namespace: harness-delegate-ng
    tags: {}