Update contrast_security_app.yaml

Author: nbuckwalt

.github/workflows/contrast_security_app.yaml

@@ -56,19 +56,47 @@ jobs:
           filePath: ${{ matrix.manifest.filePath }}
           repositoryId: ${{ matrix.manifest.repositoryId }}
           projectGroupId: ${{ matrix.manifest.projectGroupId }}
-      - name: Print Contrast Audit Log (for debugging)
+        # --- Debugging Steps (CRITICAL for your issue) ---
+
+      # Step 1: List files to confirm the log file's presence and location
+      - name: List Files After Contrast Audit
+        if: always() # Run this step even if the previous audit step fails
         run: |
-          if [ -f "pom.xml.contrast.log" ]; then
-            echo "--- Content of pom.xml.contrast.log ---"
-            cat pom.xml.contrast.log
-            echo "---------------------------------------"
+          echo "Listing files in current directory (should be /home/runner/work/mcp-contrast/mcp-contrast):"
+          ls -F
+          echo ""
+          echo "Listing files recursively from current directory:"
+          ls -R
+          echo ""
+          echo "Searching for any file containing 'contrast.log' in its name:"
+          find . -name "*contrast.log*"
+
+      # Step 2: Print the content of the expected log file to the job output
+      - name: Print Contrast Audit Log Content
+        if: always() # Run this step even if the previous audit step fails
+        run: |
+          LOG_FILE="pom.xml.contrast.log"
+          if [ -f "$LOG_FILE" ]; then
+            echo "--- START OF $LOG_FILE CONTENT ---"
+            cat "$LOG_FILE"
+            echo "--- END OF $LOG_FILE CONTENT ---"
           else
-            echo "pom.xml.contrast.log not found."
+            echo "WARNING: Log file '$LOG_FILE' was not found at this path."
           fi
-        if: always() # Always run this step
-      - name: Upload Contrast Audit Log
+
+      # Step 3: Upload the log file as an artifact
+      - name: Upload Contrast Audit Log Artifact
         uses: actions/upload-artifact@v4
         with:
-          name: contrast-audit-log
-          path: pom.xml.contrast.log
-        if: always() # Upload even on failure to get the log
+          name: contrast-sca-audit-log
+          path: pom.xml.contrast.log # <--- !!! THIS IS THE CRUCIAL FIX !!! Ensure this matches the log file name
+          retention-days: 5 # Optional: how long to keep the artifact
+        if: always() # Upload even if the job fails, so you can inspect the log
+
+      # --- Optional: Notifications/Status Updates ---
+      # Example: Post a status if the audit failed (as seen in your original output)
+      - name: Audit Status Check
+        if: ${{ failure() }}
+        run: |
+          echo "Audit failed check logs in pom.xml.contrast.log for more info"
+          exit 1 # Ensures the workflow step also fails if this condition is met