Merge pull request #79 from NSAPH-Data-Processing/mahimakaur/issue78

add GH Actions (GHA) yaml file with small change on GHA secret name

Author: devbioinfoguy

.github/workflows/main.yaml

@@ -0,0 +1,46 @@
+name: Checkmarx One Scan and sync up to codecommit
+on:
+  push:
+    branches:
+      - main
+      - master
+      - dev
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Checkmarx One CLI Action
+        uses: checkmarx/ast-github-action@main #Github Action version
+        with:
+          project_name: ${{ secrets.PROJECT_NAME }}
+          cx_tenant: ${{ secrets.CX_TENANT }}
+          base_uri: ${{ secrets.BASE_URI }} 
+          cx_client_id: ${{ secrets.CX_CLIENT_ID }}
+          cx_client_secret: ${{ secrets.CX_CLIENT_SECRET }}
+          additional_params: --threshold "sast-high=1; sast-medium=1; sca-high=1; sca-medium=1; sast-low=1; sca-low=1"
+  sync:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v5.1.0
+        with:
+          role-to-assume: ${{ secrets.ROLE_ARN }} 
+          role-session-name: GH2CodeCommit_viaOIDC_${{ github.run_id }}
+          aws-region: ${{ secrets.REGION }}
+
+      - name: Sync up to CodeCommit
+        uses: tsgit18/sync-up-to-codecommit-action@v1.0.6
+        with:
+          repository_name: ${{ secrets.REPO }}
+          aws_region: ${{ secrets.REGION }}