1. Navegue até o arquivo .yml do pipeline.
2. Na seção Tarefas no lado direito, pesquise a tarefa de extensão Resultados de segurança do ServiceNow DevOps.
3. Insira o endpoint da ServiceNow.
4. Insira os atributos de resultados de segurança da seguinte forma.
   • SAST do Checkmarx

     - task: ServiceNow-DevOps-Build-Security-Results@1
         inputs:
           connectedServiceName: "" # ServiceNow DevOps Change Velocity Service Connection
           securityResultAttributes: |
             {"scanner": "Checkmarx SAST",  "projectId": "", "securityToolId": ""}
           # scanner: Scanning tool and is required e.g. Checkmarx SAST.
           # projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
           # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmarx One

     - task: ServiceNow-DevOps-Build-Security-Results@1
         inputs:
           connectedServiceName: "" # ServiceNow DevOps Change Velocity Service Connection
           securityResultAttributes: |
             {"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}
           # scanner: Scanning tool and is required e.g. Checkmarx One.
           # projectName: Name of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
           # projectId: Id of your Checkmarx One project and can be used instead of projectName field. This attribute is applicable only for Checkmarx One.
           # scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
           # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

5. Selecione Adicionar para adicionar o código de ação personalizado ao pipeline.

1. Navegue até a Sintaxe do Pipeline a partir de um pipeline configurado.
2. Selecione a etapa snDevOpsSecurityResult na lista Etapa de Amostra e atualize os valores dos atributos de verificação de segurança na etapa.
3. Selecione Gerar script de pipeline para criar um snippet. Você pode copiar e colar o snippet no pipeline.
   • SAST do Checkmarx

     snDevOpsSecurityResult securityResultAttributes: '{"scanner": "Checkmarx SAST", "projectId": "", "securityToolId": ""}'
     // scanner: Scanning tool and is required e.g. Checkmarx SAST.
     // projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
     // securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmarx One

     snDevOpsSecurityResult securityResultAttributes: '{"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}'
     // scanner: Scanning tool and is required e.g. Checkmarx One.
     // projectName/projectId: Name/Id of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
     // scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
     // securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

1. Navegue até o arquivo .yml do fluxo de trabalho.
2. Na seção Mercado do lado direito, pesquise a ação personalizada Resultados de segurança do ServiceNow DevOps.
3. Adicione o seguinte snippet ao arquivo .yml.
   • SAST do Checkmarx

     ServiceNowSecurityScanResults:
         # jobs that must complete successfully before this job will run
         needs: build
         # type of machine to run the job on
         runs-on: ubuntu-latest
         name: ServiceNow Security Scan Results
         steps:
           - name: ServiceNow DevOps Security Results
             uses: ServiceNow/servicenow-devops-security-result@v3.0.0
             with:
                 # Devops Integration User Name
                 devops-integration-user-name: ${{ secrets.SN_DEVOPS_USER }}
                 # Devops Integration User Password
                 devops-integration-user-password: ${{ secrets.SN_DEVOPS_PASSWORD }}
                 # ServiceNow Instance URL
                 instance-url: ${{ secrets.SN_INSTANCE_URL }}
                 # Orchestration Tool Id
                 tool-id: ${{ secrets.SN_ORCHESTRATION_TOOL_ID }}
                 # GitHub Context
                 context-github: ${{ toJSON(github) }}
                 # Display Name of the Job
                 job-name: 'ServiceNow Security Scan Results'
                 security-result-attributes: '{"scanner": "Checkmarx SAST", "projectId": "", "securityToolId": ""}'
                 # scanner: Scanning tool and is required e.g. Checkmarx SAST.
                 # projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
                 # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmarx One

     ServiceNowSecurityScanResults:
         # jobs that must complete successfully before this job will run
         needs: build
         # type of machine to run the job on
         runs-on: ubuntu-latest
         name: ServiceNow Security Scan Results
         steps:
           - name: ServiceNow DevOps Security Results
             uses: ServiceNow/servicenow-devops-security-result@v3.0.0
             with:
                 # Devops Integration User Name
                 devops-integration-user-name: ${{ secrets.SN_DEVOPS_USER }}
                 # Devops Integration User Password
                 devops-integration-user-password: ${{ secrets.SN_DEVOPS_PASSWORD }}
                 # ServiceNow Instance URL
                 instance-url: ${{ secrets.SN_INSTANCE_URL }}
                 # Orchestration Tool Id
                 tool-id: ${{ secrets.SN_ORCHESTRATION_TOOL_ID }}
                 # GitHub Context
                 context-github: ${{ toJSON(github) }}
                 # Display Name of the Job
                 job-name: 'ServiceNow Security Scan Results'
                 security-result-attributes: '{"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}'
                 # scanner: Scanning tool and is required e.g. Checkmarx One.
                 # projectName/projectId: Name/Id of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
                 # scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
                 # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

- stage:
    name: ServiceNow DevOps Security Result
    identifier: Security
    description: ""
    type: Custom
    spec:
      execution:
        steps:
          - stepGroup:
              name: Security
              identifier: Security
              steps:
                - step:
                    type: Run
                    name: ServiceNow DevOps Security Result
                    identifier: ServiceNow_DevOps_Security_Result
                    spec:
                      connectorRef: docker_hub_connector_for_harness
                      image: servicenowdocker/sndevops:5.0.0
                      shell: Sh
                      command: |-
                        sndevopscli create securityScan -p  

                        "{"pipelineInfo":{
                            "buildNumber":"<+stage.nodeExecutionId>",
                            "taskExecutionUrl":"<+pipeline.executionUrl>?stage=<+stage.nodeExecutionId>", 
                            "orchestrationPipeline":"<+org.identifier>/<+project.identifier>/<+pipeline.name>" 
                          },
                          "securityResultAttributes":{
				"scanner":"Veracode",
				"applicationName":"",
				"buildVersion":"",
				"securityToolId":""
                          }
                        }"
                      envVariables:
                        SNOW_URL: <+variable.SNOW_URL>
                        SNOW_TOOLID: <+variable.SNOW_TOOLID>
                        SNOW_TOKEN: <+variable.SNOW_TOKEN>
              stepGroupInfra:
                type: KubernetesDirect
                spec:
                  connectorRef: kubernates_connector
                  namespace: harness-delegate-ng
    tags: {}