Skip to content

Commit 23110ea

Browse files
change to use sarif with codeql
1 parent 44afe71 commit 23110ea

File tree

1 file changed

+18
-20
lines changed

1 file changed

+18
-20
lines changed

.github/workflows/deploy.yml

Lines changed: 18 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,25 +1,14 @@
1-
name: build
1+
name: Security Analysis
22

33
on:
44
push:
55
branches:
66
- main
77
pull_request:
8+
branches:
9+
- main
810

9-
jobs:
10-
Bearer:
11-
runs-on: ubuntu-latest
12-
steps:
13-
- name: Checkout source code
14-
uses: actions/checkout@v4
15-
- name: Run Report
16-
id: report
17-
uses: bearer/bearer-action@v2
18-
# - name: upload Bearer scan SARIF report
19-
# uses: github/codeql-action/upload-sarif@v3
20-
# with:
21-
# sarif_file: ${{ steps.report.outputs.sarif }}
22-
11+
jobs:
2312
Anchore:
2413
runs-on: ubuntu-latest
2514
steps:
@@ -31,8 +20,17 @@ jobs:
3120
with:
3221
path: "."
3322
# fail-build: false
34-
output-format: table
35-
# - name: upload Anchore scan SARIF report
36-
# uses: github/codeql-action/upload-sarif@v3
37-
# with:
38-
# sarif_file: ${{ steps.scan.outputs.sarif }}
23+
# output-format: table
24+
- name: upload Anchore scan SARIF report
25+
uses: github/codeql-action/upload-sarif@v3
26+
with:
27+
sarif_file: ${{ steps.scan.outputs.sarif }}
28+
29+
Bearer:
30+
runs-on: ubuntu-latest
31+
steps:
32+
- name: Checkout source code
33+
uses: actions/checkout@v4
34+
- name: Run Report
35+
id: report
36+
uses: bearer/bearer-action@v2

0 commit comments

Comments
 (0)