InferSharp code scan workflow

Author: ckadluba

.github/workflows/pr-analysis-infersharp.yml

@@ -0,0 +1,43 @@
+name: PR Analysis InferSharp
+
+on:
+  workflow_run:
+    workflows: [ "PR Validation" ]
+    branches: [ dev, main ]
+    types:
+      - completed
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+jobs:
+  download-and-infersharp:
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    steps:
+      - name: Download binaries artifact from PR Validation workflow
+        id: download-artifact
+        uses: dawidd6/action-download-artifact@v2
+        with:
+          workflow: pr-validation.yml
+          workflow_conclusion: success
+          name: bin-net6
+          path: bin-net6
+          branch: ${{ github.ref }}
+          check_artifacts: true
+          search_artifacts: true
+
+      - name: Run Infer#
+        uses: microsoft/[email protected]
+        id: runinfersharp
+        with:
+          binary-path: bin-net6
+
+      - name: Upload SARIF output to GitHub Security Center
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: infer-out/report.sarif

.github/workflows/pr-validation.yml

@@ -15,3 +15,9 @@ jobs:
 
       - name: Run build and tests
         run: ./Build.ps1
+
+      - name: Upload binaries artifact for InferSharp workflow
+        uses: actions/upload-artifact@v3
+        with:
+          name: bin-net6
+          path: src\Serilog.Sinks.MSSqlServer\bin\Release\net6.0

serilog-sinks-mssqlserver.sln

@@ -26,9 +26,10 @@ Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "Solution Items", "Solution
 		CHANGES.md = CHANGES.md
 		Directory.Packages.props = Directory.Packages.props
 		.github\ISSUE_TEMPLATE.md = .github\ISSUE_TEMPLATE.md
-		.github\workflows\pr-validation.yml = .github\workflows\pr-validation.yml
 		.github\workflows\pr-analysis-codeql.yml = .github\workflows\pr-analysis-codeql.yml
 		.github\workflows\pr-analysis-devskim.yml = .github\workflows\pr-analysis-devskim.yml
+		.github\workflows\pr-analysis-infersharp.yml = .github\workflows\pr-analysis-infersharp.yml
+		.github\workflows\pr-validation.yml = .github\workflows\pr-validation.yml
 		README.md = README.md
 		.github\workflows\release.yml = .github\workflows\release.yml
 	EndProjectSection