Skip to content

ci(deps): bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 in the github-actions group #5

ci(deps): bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 in the github-actions group

ci(deps): bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 in the github-actions group #5

name: ShiftLeft Scan
on:
push:
branches:
- main
pull_request:
branches:
- main
permissions:
contents: read
security-events: write
jobs:
Scan-Build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Perform Scan
uses: ShiftLeftSecurity/scan-action@54980bbdae434b8e7903cfcffa98a2601c207962 # v1.3.0
env:
WORKSPACE: ""
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SCAN_AUTO_BUILD: true
with:
output: reports
- name: Upload Report
uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
with:
sarif_file: reports