AquaSec Scan update

Author: tmikula-dev

.github/workflows/aquasec_repository_scan.yml

@@ -26,24 +26,23 @@ jobs:
         env:
           AQUA_KEY: ${{ secrets.AQUA_KEY }}
           AQUA_SECRET: ${{ secrets.AQUA_SECRET }}
+          REPOSITORY_ID: ${{ secrets.AQUA_REPOSITORY_ID }}
         run: |
           set -euo pipefail
           
           echo "=== Authenticating with AquaSec ==="
-          echo "${{ github.repository_id }}"
-          
           METHOD="POST"
           AUTH_ENDPOINT="https://eu-1.api.cloudsploit.com/v2/tokens"
           TIMESTAMP=$(date -u +%s)
           POST_BODY='{"group_id":1228,"allowed_endpoints":["GET"],"validity":240}'
           STRING_TO_SIGN="${TIMESTAMP}${METHOD}/v2/tokens${POST_BODY}"
-          SIGNATURE=$(echo -n "$STRING_TO_SIGN" | openssl dgst -sha256 -hmac "$AQUA_SECRET" -hex | sed 's/.*= //g')
+          SIGNATURE=$(echo -n "$STRING_TO_SIGN" | openssl dgst -sha256 -hmac "${AQUA_SECRET}" -hex | sed 's/.*= //g')
 
-          AUTH_RESPONSE=$(curl -s -X "$METHOD" "$AUTH_ENDPOINT" \
+          AUTH_RESPONSE=$(curl -s -X $METHOD "$AUTH_ENDPOINT" \
             -H "Content-Type: application/json" \
             -H "X-API-Key: $AQUA_KEY" \
-            -H "X-Signature: $SIGNATURE" \
             -H "X-Timestamp: $TIMESTAMP" \
+            -H "X-Signature: $SIGNATURE" \
             -d "$POST_BODY")
           
           RESPONSE_STATUS=$(echo "$AUTH_RESPONSE" | jq -r '.status')
@@ -58,9 +57,8 @@ jobs:
           
           echo "=== Receiving AquaSec Scan Results ==="
           
-          SCAN_RESULTS_ENDPOINT="https://eu-central-1.edge.cloud.aquasec.com/codesec/api/v1/scans/results"
-          SCAN_RESULTS=$(curl -s -X GET \
-            "$SCAN_RESULTS_ENDPOINT?repositoryIds=${{ github.repository_id }} \
+          SCAN_RESULTS_ENDPOINT="https://eu-1.codesec.aquasec.com/api/v1/scans/results"
+          SCAN_RESULTS=$(curl -s -X GET "$SCAN_RESULTS_ENDPOINT?repositoryIds=${REPOSITORY_ID}" \
             -H "Authorization: Bearer $BEARER_TOKEN" \
             -H "Accept: application/json")
           
@@ -70,4 +68,4 @@ jobs:
           fi
           
           echo "=== Scan Results ==="
-          echo "$SCAN_RESULTS" | jq '.'
+          echo "$SCAN_RESULTS"