Skip to content

build(deps): bump apisec-inc/ethicalcheck-action from 005fac321dd843682b1af6b72f30caaf9952c641 to 6538d51caea53470bf8018e21f93414a70026f46 #118

build(deps): bump apisec-inc/ethicalcheck-action from 005fac321dd843682b1af6b72f30caaf9952c641 to 6538d51caea53470bf8018e21f93414a70026f46

build(deps): bump apisec-inc/ethicalcheck-action from 005fac321dd843682b1af6b72f30caaf9952c641 to 6538d51caea53470bf8018e21f93414a70026f46 #118

Workflow file for this run

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
name: flawfinder
on:
push:
branches: [ "master" ]
pull_request:
# The branches below must be a subset of the branches above
branches: [ "master" ]
schedule:
- cron: '27 10 * * 2'
permissions:
contents: read
jobs:
flawfinder:
name: Flawfinder
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Harden Runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with:
egress-policy: audit
- name: Checkout code
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: flawfinder_scan
uses: david-a-wheeler/flawfinder@8e4a779ad59dbfaee5da586aa9210853b701959c
with:
arguments: '--sarif ./'
output: 'flawfinder_results.sarif'
- name: Upload analysis results to GitHub Security tab
uses: github/codeql-action/upload-sarif@2f93e4319b2f04a2efc38fa7f78bd681bc3f7b2f # v2.23.2
with:
sarif_file: ${{github.workspace}}/flawfinder_results.sarif