1. Accédez à votre fichier .yml de pipeline.
2. Dans la section Tâches sur le côté droit, recherchez la tâche d'extension Résultats de sécurité ServiceNow DevOps.
3. Saisissez le point de terminaison ServiceNow.
4. Saisissez les attributs des résultats de sécurité comme suit.
   • Checkmarx SAST

     - task: ServiceNow-DevOps-Build-Security-Results@1
         inputs:
           connectedServiceName: "" # ServiceNow DevOps Change Velocity Service Connection
           securityResultAttributes: |
             {"scanner": "Checkmarx SAST",  "projectId": "", "securityToolId": ""}
           # scanner: Scanning tool and is required e.g. Checkmarx SAST.
           # projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
           # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmarx One

     - task: ServiceNow-DevOps-Build-Security-Results@1
         inputs:
           connectedServiceName: "" # ServiceNow DevOps Change Velocity Service Connection
           securityResultAttributes: |
             {"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}
           # scanner: Scanning tool and is required e.g. Checkmarx One.
           # projectName: Name of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
           # projectId: Id of your Checkmarx One project and can be used instead of projectName field. This attribute is applicable only for Checkmarx One.
           # scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
           # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

5. Sélectionnez Ajouter pour ajouter le code d'action personnalisé à votre pipeline.

1. Accédez à la syntaxe du pipeline à partir d'un pipeline configuré.
2. Sélectionnez l'étape snDevOpsSecurityResult dans la liste Exemple d'étape, puis mettez à jour les valeurs des attributs d'analyse de sécurité dans l'étape.
3. Sélectionnez Générer un script de pipeline pour créer un extrait. Vous pouvez copier-coller l'extrait dans le pipeline.
   • Checkmarx SAST

     snDevOpsSecurityResult securityResultAttributes: '{"scanner": "Checkmarx SAST", "projectId": "", "securityToolId": ""}'
     // scanner: Scanning tool and is required e.g. Checkmarx SAST.
     // projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
     // securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmarx One

     snDevOpsSecurityResult securityResultAttributes: '{"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}'
     // scanner: Scanning tool and is required e.g. Checkmarx One.
     // projectName/projectId: Name/Id of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
     // scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
     // securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

1. Accédez à votre fichier .yml de workflow.
2. Dans la section Place de marché sur le côté droit, recherchez l'action personnalisée Résultats de sécurité ServiceNow DevOps.
3. Ajoutez l'extrait suivant dans votre fichier .yml.
   • Checkmarx SAST

     ServiceNowSecurityScanResults:
         # jobs that must complete successfully before this job will run
         needs: build
         # type of machine to run the job on
         runs-on: ubuntu-latest
         name: ServiceNow Security Scan Results
         steps:
           - name: ServiceNow DevOps Security Results
             uses: ServiceNow/servicenow-devops-security-result@v3.0.0
             with:
                 # Devops Integration User Name
                 devops-integration-user-name: ${{ secrets.SN_DEVOPS_USER }}
                 # Devops Integration User Password
                 devops-integration-user-password: ${{ secrets.SN_DEVOPS_PASSWORD }}
                 # ServiceNow Instance URL
                 instance-url: ${{ secrets.SN_INSTANCE_URL }}
                 # Orchestration Tool Id
                 tool-id: ${{ secrets.SN_ORCHESTRATION_TOOL_ID }}
                 # GitHub Context
                 context-github: ${{ toJSON(github) }}
                 # Display Name of the Job
                 job-name: 'ServiceNow Security Scan Results'
                 security-result-attributes: '{"scanner": "Checkmarx SAST", "projectId": "", "securityToolId": ""}'
                 # scanner: Scanning tool and is required e.g. Checkmarx SAST.
                 # projectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
                 # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

   • Checkmarx One

     ServiceNowSecurityScanResults:
         # jobs that must complete successfully before this job will run
         needs: build
         # type of machine to run the job on
         runs-on: ubuntu-latest
         name: ServiceNow Security Scan Results
         steps:
           - name: ServiceNow DevOps Security Results
             uses: ServiceNow/servicenow-devops-security-result@v3.0.0
             with:
                 # Devops Integration User Name
                 devops-integration-user-name: ${{ secrets.SN_DEVOPS_USER }}
                 # Devops Integration User Password
                 devops-integration-user-password: ${{ secrets.SN_DEVOPS_PASSWORD }}
                 # ServiceNow Instance URL
                 instance-url: ${{ secrets.SN_INSTANCE_URL }}
                 # Orchestration Tool Id
                 tool-id: ${{ secrets.SN_ORCHESTRATION_TOOL_ID }}
                 # GitHub Context
                 context-github: ${{ toJSON(github) }}
                 # Display Name of the Job
                 job-name: 'ServiceNow Security Scan Results'
                 security-result-attributes: '{"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}'
                 # scanner: Scanning tool and is required e.g. Checkmarx One.
                 # projectName/projectId: Name/Id of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
                 # scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
                 # securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.

- stage:
    name: ServiceNow DevOps Security Result
    identifier: Security
    description: ""
    type: Custom
    spec:
      execution:
        steps:
          - stepGroup:
              name: Security
              identifier: Security
              steps:
                - step:
                    type: Run
                    name: ServiceNow DevOps Security Result
                    identifier: ServiceNow_DevOps_Security_Result
                    spec:
                      connectorRef: docker_hub_connector_for_harness
                      image: servicenowdocker/sndevops:5.0.0
                      shell: Sh
                      command: |-
                        sndevopscli create securityScan -p  

                        "{"pipelineInfo":{
                            "buildNumber":"<+stage.nodeExecutionId>",
                            "taskExecutionUrl":"<+pipeline.executionUrl>?stage=<+stage.nodeExecutionId>", 
                            "orchestrationPipeline":"<+org.identifier>/<+project.identifier>/<+pipeline.name>" 
                          },
                          "securityResultAttributes":{
				"scanner":"Veracode",
				"applicationName":"",
				"buildVersion":"",
				"securityToolId":""
                          }
                        }"
                      envVariables:
                        SNOW_URL: <+variable.SNOW_URL>
                        SNOW_TOOLID: <+variable.SNOW_TOOLID>
                        SNOW_TOKEN: <+variable.SNOW_TOKEN>
              stepGroupInfra:
                type: KubernetesDirect
                spec:
                  connectorRef: kubernates_connector
                  namespace: harness-delegate-ng
    tags: {}