Skip to content

chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#310) #3

chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#310)

chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#310) #3

Workflow file for this run

name: "[SARIF] Run Scan Action"
on: [push, pull_request]
jobs:
sarif-image:
runs-on: ubuntu-latest
steps:
- name: Checkout the code
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
- name: Run the local Scan Action with SARIF generation enabled
id: scan
uses: ./
with:
image: "debian:8"
fail-build: false
#severity-cutoff: "Medium"
- name: Inspect Generated SARIF
run: cat ${{ steps.scan.outputs.sarif }}
# Commented out to prevent incorrect SARIF uploads for this action
# TODO: add functional tests that validate this
# - name: Upload SARIF
# uses: github/codeql-action/upload-sarif@v2
# with:
# sarif_file: ${{ steps.scan.outputs.sarif }}
sarif-directory:
runs-on: ubuntu-latest
steps:
- name: Checkout the code
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
- name: Run the local Scan Action with SARIF generation enabled
id: scan
uses: ./
with:
path: "tests/fixtures/npm-project"
fail-build: false
#severity-cutoff: "Medium"
- name: Inspect Generated SARIF
run: cat ${{ steps.scan.outputs.sarif }}
# Commented out to prevent incorrect SARIF uploads for this action
# TODO: add functional tests that validate this
# - name: Upload SARIF
# uses: github/codeql-action/upload-sarif@v2
# with:
# sarif_file: ${{ steps.scan.outputs.sarif }}