github.com/ronaksoft/rony@v0.16.26-0.20230807065236-1743dbfe6959/.github/workflows/devskim-analysis.yml (about)

     1  # This workflow uses actions that are not certified by GitHub.
     2  # They are provided by a third-party and are governed by
     3  # separate terms of service, privacy policy, and support
     4  # documentation.
     5  
     6  name: DevSkim
     7  
     8  on:
     9    push:
    10      tags:  [ v* ]
    11    schedule:
    12      - cron: '41 12 * * 0'
    13  
    14  jobs:
    15    lint:
    16      name: DevSkim
    17      runs-on: ubuntu-20.04
    18      permissions:
    19        actions: read
    20        contents: read
    21        security-events: write
    22      steps:
    23        - name: Checkout code
    24          uses: actions/checkout@v2
    25  
    26        - name: Run DevSkim scanner
    27          uses: microsoft/DevSkim-Action@v1
    28          
    29        - name: Upload DevSkim scan results to GitHub Security tab
    30          uses: github/codeql-action/upload-sarif@v1
    31          with:
    32            sarif_file: devskim-results.sarif