From 8e2e122086a8072c2a9c49f7f55a59e237a339c0 Mon Sep 17 00:00:00 2001 From: LanikSJ Date: Thu, 14 Nov 2024 02:43:44 -0800 Subject: [PATCH 1/2] Add ShiftLeft GitHub Action --- .github/workflows/shiftleft-analysis.yml | 29 ++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/shiftleft-analysis.yml diff --git a/.github/workflows/shiftleft-analysis.yml b/.github/workflows/shiftleft-analysis.yml new file mode 100644 index 0000000..f072bea --- /dev/null +++ b/.github/workflows/shiftleft-analysis.yml @@ -0,0 +1,29 @@ +name: ShiftLeft Scan + +on: + push: + branches: + - master + pull_request: + branches: + - master + +jobs: + Scan-Build: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Perform Scan + uses: ShiftLeftSecurity/scan-action@master + env: + WORKSPACE: "" + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + SCAN_AUTO_BUILD: true + with: + output: reports + + - name: Upload Report + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: reports From 5b4b15777341568ad7799fe7343e979b94067d14 Mon Sep 17 00:00:00 2001 From: LanikSJ Date: Thu, 14 Nov 2024 02:44:52 -0800 Subject: [PATCH 2/2] Update ShiftLeft GitHub Action --- .github/workflows/shiftleft-analysis.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/shiftleft-analysis.yml b/.github/workflows/shiftleft-analysis.yml index f072bea..c0f051d 100644 --- a/.github/workflows/shiftleft-analysis.yml +++ b/.github/workflows/shiftleft-analysis.yml @@ -3,10 +3,10 @@ name: ShiftLeft Scan on: push: branches: - - master + - main pull_request: branches: - - master + - main jobs: Scan-Build: