AST-168518 Added addition SCA package manager support

[cx-anand-nandeshwar]

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Added new package manager support for OSS scan engine listed below.

• Java: Gradle (build.gradle, build.gradle.kts)
• Java: SBT (build.sbt, any .sbt file ✱)
• JS/TS: Yarn (1 & 2) (package.json, yarn.lock)
• JS/TS: Bower (bower.json)
• Python: PIP (requirements.txt, requirements-.txt, requirement.txt, requirement-.txt)
• Python: Setup.py / Setuptools (Setup.py, Setup.cfg)
• Python: Poetry (pyproject.toml, poetry.lock)
• PHP/Drupal: Composer (composer.json, composer.lock)
• Ruby: RubyGems (Gemfile, Gemfile.lock)

References

Include supporting link to GitHub Issue/PR number

Testing

Describe how this change was tested. Be specific about anything not tested and reasons why. If this solution has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

Please include any manual steps for testing end-to-end or functionality not covered by unit/integration tests.

Checklist

• I have added documentation for new/changed functionality in this PR (if applicable).
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used

[stepsecurity-app]

Security Policy Alert: Actions Policy Violation

This workflow run has been blocked by StepSecurity's actions policy.

Disallowed Actions:

• timonvs/pr-labeler-action@8b99f404a073744885d8021d1de4e40c6eaf38e2

To fix this issue, please modify the workflow to use only allowed actions. Contact your organization administrator to request changes to the allowed actions list if needed.

For more information, see StepSecurity's Actions Policy documentation.