1
0
Fork 0
mirror of https://github.com/actions/upload-artifact synced 2024-12-22 22:42:46 +00:00

Create devskim-analysis.yml

This commit is contained in:
Juri Burakov 2021-10-05 18:50:12 +03:00 committed by GitHub
parent c780d1c47d
commit 70b500fa76
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

34
.github/workflows/devskim-analysis.yml vendored Normal file
View file

@ -0,0 +1,34 @@
# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
name: DevSkim
on:
push:
branches: [ main, upload-artifact ]
pull_request:
branches: [ main ]
schedule:
- cron: '18 14 * * 6'
jobs:
lint:
name: DevSkim
runs-on: ubuntu-20.04
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Run DevSkim scanner
uses: microsoft/DevSkim-Action@v1
- name: Upload DevSkim scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v1
with:
sarif_file: devskim-results.sarif