Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,14 @@ All notable changes to this project are documented here. The format follows
[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the project adheres to
[Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [1.0.0] — Unreleased
## [1.0.1] — Unreleased

### Changed

- Marketplace display name from **Conviso GitHub Sync Task** to **Sync External Scans with Conviso**.
Workflows keep using `convisoappsec/github-sync-task@v1`.

## [1.0.0] — 2026-08-10

First release.

Expand Down
26 changes: 14 additions & 12 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
<img src="images/logo.jpeg" alt="Conviso Application Security" width="96" align="right">

# Conviso GitHub Sync Task
# Sync External Scans with Conviso

A GitHub Action, written in TypeScript, that associates a project with the Conviso GraphQL API.
It triggers a sync to Conviso Platform for a project held by an external scanner (Fortify,
Expand All @@ -9,25 +9,27 @@ repository and branch the scan came from.

## Table of Contents

- [Features](#features)
- [Quick start](#quick-start)
- [Inputs](#inputs)
- [Outputs](#outputs)
- [Usage](#usage)
- [Sync External Scans with Conviso](#sync-external-scans-with-conviso)
- [Table of Contents](#table-of-contents)
- [Features](#features)
- [Quick start](#quick-start)
- [Inputs](#inputs)
- [Outputs](#outputs)
- [Usage](#usage)
- [Associating a branch](#associating-a-branch)
- [Pull requests](#pull-requests)
- [Using the outputs](#using-the-outputs)
- [Prerequisites](#prerequisites)
- [Project structure](#project-structure)
- [Development](#development)
- [Prerequisites](#prerequisites)
- [Project structure](#project-structure)
- [Development](#development)
- [Building the bundle](#building-the-bundle)
- [Running tests](#running-tests)
- [Trying the action locally](#trying-the-action-locally)
- [Publishing](#publishing)
- [Publishing](#publishing)
- [Releasing a version](#releasing-a-version)
- [Publishing to the GitHub Marketplace](#publishing-to-the-github-marketplace)
- [Contributing](#contributing)
- [License](#license)
- [Contributing](#contributing)
- [License](#license)

## Features

Expand Down
2 changes: 1 addition & 1 deletion action.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: 'Conviso GitHub Sync Task'
name: 'Sync External Scans with Conviso'
description: 'Triggers a sync to Conviso Platform for a given project of a scanner (e.g.: Fortify, Checkmarx, Dependency Track).'
author: 'Conviso Application Security'

Expand Down
9 changes: 5 additions & 4 deletions docs/publishing-marketplace.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Publishing to the GitHub Marketplace

Everything needed to get **Conviso GitHub Sync Task** listed on the
Everything needed to get **Sync External Scans with Conviso** listed on the
[GitHub Marketplace](https://github.com/marketplace?type=actions), and to keep it updated
afterwards.

Expand Down Expand Up @@ -52,9 +52,10 @@ in this repository; the rest is account configuration that only a person can do.
- [ ] **The repository is public.** Private repositories cannot be listed.
- [ ] **The `name` in `action.yml` is unique across the Marketplace.** GitHub rejects a name that
another listing already uses, that matches an existing GitHub user or organization, or that
collides with a Marketplace category. `Conviso GitHub Sync Task` is specific enough to be
safe, but the check happens at publish time — if it fails, change `name` in `action.yml`
(the `uses:` reference is the repository path, so renaming does not break consumers).
collides with a Marketplace category. `Sync External Scans with Conviso` is specific enough
to be safe, but the check happens at publish time — if it fails, change `name` in
`action.yml` (the `uses:` reference is the repository path, so renaming does not break
consumers).
- [ ] **Two-factor authentication is enabled** for the account that owns the repository. For
`convisoappsec`, that means 2FA on the organization; an owner enables it under
*Organization settings → Authentication security*.
Expand Down
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "conviso-github-sync-task",
"version": "1.0.0",
"version": "1.0.1",
"description": "GitHub Action that triggers a sync to Conviso Platform for a given project of a scanner (e.g.: Fortify, Checkmarx, Dependency Track).",
"main": "dist/index.js",
"license": "MIT",
Expand Down