Skip to content
check-circle

GitHub Action

SecurityCodeScan

v1.3 Latest version

SecurityCodeScan

check-circle

SecurityCodeScan

Security Code Scan action to upload code scanning results

Installation

Copy and paste the following snippet into your .yml file.

 
              
- name: SecurityCodeScan

              
  uses: security-code-scan/[email protected]
Learn more about this action in security-code-scan/security-code-scan-results-action

Choose a version

Security-Code-Scan Results Action

This action is designed to run as part of a workflow that builds projects referencing NuGet SecurityCodeScan.VS2019.

It produces a GitHub compatible SARIF file for uploading to the repository 'Code scanning alerts'.

Usage

See action.yml

Input Parameters

sarif_directory: (optional) The output directory where SARIF files should be collected.

Workflow Examples

on:
  push:

jobs:
  SCS:
    runs-on: ubuntu-latest
    steps:     
      - uses: actions/checkout@v2
      
      - name: Set up projects
        uses: security-code-scan/[email protected]

      - name: Build
        run: |
          dotnet restore
          dotnet build
        
      - name: Convert sarif for uploading to GitHub
        uses: security-code-scan/security-code-scan-results-action@v1
        
      - name: Upload sarif	
        uses: github/codeql-action/upload-sarif@v1

For .NET 4.x example see FullDotNetWebApp demo repository.