Add flawfinder action

This commit is contained in:
Matt Johnston 2022-05-23 16:32:11 +08:00 committed by GitHub
parent 3c3e4f6e6b
commit b81c81c047
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

33
.github/workflows/flawfinder.yml vendored Normal file
View File

@ -0,0 +1,33 @@
name: flawfinder
on:
push:
branches: [ master ]
pull_request:
# The branches below must be a subset of the branches above
branches: [ master ]
schedule:
- cron: '17 3 * * 5'
jobs:
flawfinder:
name: Flawfinder
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout code
uses: actions/checkout@v3
- name: flawfinder_scan
uses: david-a-wheeler/flawfinder@8e4a779ad59dbfaee5da586aa9210853b701959c
with:
arguments: '--sarif ./'
output: 'flawfinder_results.sarif'
- name: Upload analysis results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: ${{github.workspace}}/flawfinder_results.sarif