forked from anchore/scan-action
-
Notifications
You must be signed in to change notification settings - Fork 0
53 lines (45 loc) · 1.47 KB
/
sarifdemo.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
name: "[SARIF] Run Scan Action"
on: [push, pull_request]
jobs:
sarif-image:
runs-on: ubuntu-latest
steps:
- name: Checkout the code
uses: actions/checkout@v2
- name: Run the local Scan Action with SARIF generation enabled
id: scan
uses: ./
with:
image: "debian:8"
debug: true
fail-build: false
#severity-cutoff: "Medium"
- name: Inspect Generated SARIF
run: cat ${{ steps.scan.outputs.sarif }}
# Commented out to prevent incorrect SARIF uploads for this action
# TODO: add functional tests that validate this
# - name: Upload SARIF
# uses: github/codeql-action/upload-sarif@v2
# with:
# sarif_file: ${{ steps.scan.outputs.sarif }}
sarif-directory:
runs-on: ubuntu-latest
steps:
- name: Checkout the code
uses: actions/checkout@v2
- name: Run the local Scan Action with SARIF generation enabled
id: scan
uses: ./
with:
path: "tests/fixtures/npm-project"
debug: true
fail-build: false
#severity-cutoff: "Medium"
- name: Inspect Generated SARIF
run: cat ${{ steps.scan.outputs.sarif }}
# Commented out to prevent incorrect SARIF uploads for this action
# TODO: add functional tests that validate this
# - name: Upload SARIF
# uses: github/codeql-action/upload-sarif@v2
# with:
# sarif_file: ${{ steps.scan.outputs.sarif }}