Skip to content

Commit a9ef14f

Browse files
committed
✨refactor: update GitGuardian and PSScriptAnalyzer workflows for improved scanning and analysis
1 parent a5d797f commit a9ef14f

File tree

3 files changed

+9
-17
lines changed

3 files changed

+9
-17
lines changed

.github/workflows/GitGuardian.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,19 +2,19 @@
22
---
33
name: GitGuardian
44

5-
on: [push, pull_request]
5+
on: [push]
66

77
jobs:
88
scanning:
9-
name: GitGuardian scan
9+
name: GitGuardian Scan
1010
runs-on: ubuntu-latest
1111
steps:
1212
- name: Checkout
1313
uses: actions/checkout@v4
1414
with:
1515
fetch-depth: 0 # fetch all history so multiple commits can be scanned
16-
- name: GitGuardian scan
17-
uses: GitGuardian/ggshield-action@v1.23.0
16+
- name: GitGuardian Scan
17+
uses: GitGuardian/ggshield-action@v1.30.0
1818
env:
1919
GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
2020
GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}

.github/workflows/MegaLinter.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747

4848
# You can override MegaLinter flavor used to have faster performances
4949
# More info at https://megalinter.io/flavors/
50-
uses: oxsecurity/megalinter/flavors/dotnet@v8.0.0
50+
uses: oxsecurity/megalinter/flavors/dotnet@v8
5151

5252
id: ml
5353

.github/workflows/PSScriptAnalyzer.yml

Lines changed: 4 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,11 @@
1-
# This workflow uses actions that are not certified by GitHub.
2-
# They are provided by a third-party and are governed by
3-
# separate terms of service, privacy policy, and support
4-
# documentation.
5-
#
6-
# https://github.com/microsoft/action-psscriptanalyzer
7-
# For more information on PSScriptAnalyzer in general, see
1+
# PSScriptAnalyzer
2+
# https://github.com/microsoft/psscriptanalyzer-action
83
# https://github.com/PowerShell/PSScriptAnalyzer
94
---
105
name: PSScriptAnalyzer
116

127
on:
138
push:
14-
branches: ["main"]
15-
pull_request:
16-
branches: ["main"]
179

1810
permissions:
1911
contents: read
@@ -30,14 +22,14 @@ jobs:
3022
- uses: actions/checkout@v4
3123

3224
- name: 🕵️‍♂️ Run PSScriptAnalyzer
33-
uses: microsoft/psscriptanalyzer-action@6b2948b1944407914a58661c49941824d149734f
25+
uses: microsoft/psscriptanalyzer-action@1.1
3426
with:
35-
# Check https://github.com/microsoft/action-psscriptanalyzer for more info about the options.
3627
# The below set up runs PSScriptAnalyzer to your entire repository and runs some basic security rules.
3728
path: .\
3829
recurse: true
3930
# Include your own basic security rules. Removing this option will run all the rules
4031
includeRule: '"PSAvoidGlobalAliases", "PSAvoidUsingConvertToSecureStringWithPlainText"'
32+
excludeRule: '"PSAvoidLongLines"'
4133
output: results.sarif
4234

4335
# Upload the SARIF file generated in the previous step

0 commit comments

Comments
 (0)