main.yml

on: [pull_request]

jobs:
  test_job:
    runs-on: ubuntu-latest
    name: A test job to test the action
    permissions:
      statuses: write
      pull-requests: write
      contents: read
      actions: read    
    steps:
      # To use this repository's private action,
      # you must check out the repository
      - name: Checkout
        uses: actions/checkout@v3
      - uses: actions/setup-node@v3.6.0
        with:
          node-version: 18
      - run: |
          # Run a SAST scan using a supprted tool, Snyk as an example
          npx snyk auth ${{ secrets.SNYK_API_KEY }}
          ! npx snyk code test --sarif-file-output=/home/runner/report.json ./
        shell: bash -l {0}
      - name: Mobb action step
        uses: ./ # Uses an action in the root directory
        with:
          report-file: "/home/runner/report.json"
          api-key: ${{ secrets.MOBB_API_TOKEN }}
          github-token: ${{ secrets.GITHUB_TOKEN }}