forked from ben-manes/caffeine
-
Notifications
You must be signed in to change notification settings - Fork 0
32 lines (30 loc) · 806 Bytes
/
devskim.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
name: DevSkim
permissions: read-all
on:
push:
branches: [master, v2.dev, v3.dev]
pull_request:
branches: [master, v2.dev, v3.dev]
schedule:
- cron: '40 22 * * 0'
jobs:
lint:
name: DevSkim
runs-on: ubuntu-20.04
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Harden Runner
uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34
with:
egress-policy: audit
- name: Checkout code
uses: actions/checkout@v3
- name: Run DevSkim scanner
uses: microsoft/DevSkim-Action@v1
- name: Upload DevSkim scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: devskim-results.sarif