Pysa

Pysa #2

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	# This workflow integrates Python Static Analyzer (Pysa) with
	# GitHub's Code Scanning feature.
	#
	# Python Static Analyzer (Pysa) is a security-focused static
	# analysis tool that tracks flows of data from where they
	# originate to where they terminate in a dangerous location.
	#
	# See https://pyre-check.org/docs/pysa-basics/

	name: Pysa

	on:
	workflow_dispatch:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]
	schedule:
	- cron: '31 4 * * 3'

	permissions:
	contents: read

	jobs:
	pysa:
	permissions:
	actions: read
	contents: read
	security-events: write

	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	with:
	submodules: true

	- name: Run Pysa
	uses: facebook/pysa-action@f46a63777e59268613bd6e2ff4e29f144ca9e88b
	with:
	# To customize these inputs:
	# See https://github.com/facebook/pysa-action#inputs
	repo-directory: './'
	requirements-path: 'requirements.txt'
	infer-types: true
	include-default-sapp-filters: true

Provide feedback