sec(ci): setup CodeQL workflow #73
Conversation
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
josimar-silva
force-pushed
the
sec/setup-security-workflows
branch
from
fe9c52b to
26e9858
Compare
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 | ||
|
|
||
| - name: ⚙️ Setup CodeQL | ||
| uses: github/codeql-action/init@v3 |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
There was a problem hiding this comment.
Renovate will do it.
| build-mode: ${{ matrix.build-mode }} | ||
|
|
||
| - name: 🔍 Perform CodeQL Analysis | ||
| uses: github/codeql-action/analyze@v3 |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
There was a problem hiding this comment.
Renovate will do it.
| persist-credentials: false | ||
|
|
||
| - name: 🔍 Run analysis | ||
| uses: ossf/scorecard-action@v2.4.2 |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
There was a problem hiding this comment.
Renovate will do it.
| publish_results: true | ||
|
|
||
| - name: ⬆️ Upload artifact | ||
| uses: actions/upload-artifact@v4 |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
There was a problem hiding this comment.
Renovate will do it.
| retention-days: 5 | ||
|
|
||
| - name: ⬆️ Upload to code-scanning | ||
| uses: github/codeql-action/upload-sarif@v3 |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
There was a problem hiding this comment.
Renovate will do it.
|
No description provided.