mirror of
https://github.com/adnanh/webhook.git
synced 2025-08-01 15:30:30 +00:00
chore: add scan.yml
This commit is contained in:
parent
267b187cb8
commit
6c8316730c
1 changed files with 34 additions and 0 deletions
34
.github/workflows/scan.yml
vendored
Normal file
34
.github/workflows/scan.yml
vendored
Normal file
|
@ -0,0 +1,34 @@
|
|||
name: "Security Scan"
|
||||
|
||||
# Run workflow each time code is pushed to your repository and on a schedule.
|
||||
# The scheduled workflow runs every at 00:00 on Sunday UTC time.
|
||||
on:
|
||||
workflow_dispatch:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
paths:
|
||||
- 'internal/**'
|
||||
- '*.go'
|
||||
pull_request:
|
||||
branches:
|
||||
- main
|
||||
schedule:
|
||||
- cron: '0 0 * * 0'
|
||||
|
||||
jobs:
|
||||
scan:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Check out code into the Go module directory
|
||||
uses: actions/checkout@v2
|
||||
- name: Security Scan
|
||||
uses: securego/gosec@master
|
||||
with:
|
||||
# we let the report trigger content trigger a failure using the GitHub Security features.
|
||||
args: '-no-fail -fmt sarif -out results.sarif ./...'
|
||||
- name: Upload SARIF file
|
||||
uses: github/codeql-action/upload-sarif@v2
|
||||
with:
|
||||
# Path to SARIF file relative to the root of the repository
|
||||
sarif_file: results.sarif
|
Loading…
Add table
Add a link
Reference in a new issue