|
| 1 | +name: ESLint |
| 2 | + |
| 3 | +on: |
| 4 | + push: |
| 5 | + branches: ['main', 'development'] |
| 6 | + pull_request: |
| 7 | + branches: ['main', 'development'] |
| 8 | + schedule: |
| 9 | + - cron: '43 16 * * 1' |
| 10 | + |
| 11 | +jobs: |
| 12 | + eslint: |
| 13 | + name: Run eslint scanning |
| 14 | + runs-on: ubuntu-latest |
| 15 | + permissions: |
| 16 | + contents: read |
| 17 | + security-events: write |
| 18 | + actions: read |
| 19 | + steps: |
| 20 | + - name: Checkout code |
| 21 | + uses: actions/checkout@v6 |
| 22 | + |
| 23 | + - name: Setup Bun |
| 24 | + uses: oven-sh/setup-bun@v2 |
| 25 | + with: |
| 26 | + bun-version: '1.3.13' |
| 27 | + |
| 28 | + - name: Install dependencies |
| 29 | + run: bun install --frozen-lockfile |
| 30 | + |
| 31 | + - name: Run ESLint |
| 32 | + continue-on-error: ${{ github.event_name == 'schedule' }} |
| 33 | + run: | |
| 34 | + bunx eslint . \ |
| 35 | + --format json \ |
| 36 | + --output-file eslint-results.json |
| 37 | +
|
| 38 | + - name: Convert ESLint results to SARIF |
| 39 | + if: ${{ always() && hashFiles('eslint-results.json') != '' }} |
| 40 | + run: | |
| 41 | + node <<'EOF' |
| 42 | + const fs = require('node:fs'); |
| 43 | + const path = require('node:path'); |
| 44 | + const { pathToFileURL } = require('node:url'); |
| 45 | + const eslintResults = JSON.parse(fs.readFileSync('eslint-results.json', 'utf8')); |
| 46 | + const rules = new Map(); |
| 47 | + const results = []; |
| 48 | + const workspaceUri = pathToFileURL(`${process.cwd()}${path.sep}`).href; |
| 49 | + for (const file of eslintResults) { |
| 50 | + const resolvedPath = path.resolve(file.filePath); |
| 51 | + const relativePath = path.relative(process.cwd(), resolvedPath).split(path.sep).join('/'); |
| 52 | + for (const message of file.messages) { |
| 53 | + const ruleId = message.ruleId ?? 'eslint'; |
| 54 | + if (!rules.has(ruleId)) rules.set(ruleId, { id: ruleId, name: ruleId, shortDescription: { text: ruleId } }); |
| 55 | + results.push({ ruleId, level: message.severity === 2 || message.fatal === true ? 'error' : 'warning', message: { text: message.message }, locations: [{ physicalLocation: { artifactLocation: { uri: relativePath, uriBaseId: 'SRCROOT' }, region: { startLine: message.line ?? 1, startColumn: message.column ?? 1, endLine: message.endLine ?? message.line ?? 1, endColumn: message.endColumn ?? message.column ?? 1 } } }] }); |
| 56 | + } |
| 57 | + } |
| 58 | + const sarif = { $schema: 'https://json.schemastore.org/sarif-2.1.0.json', version: '2.1.0', runs: [{ tool: { driver: { name: 'ESLint', informationUri: 'https://eslint.org', rules: [...rules.values()] } }, originalUriBaseIds: { SRCROOT: { uri: workspaceUri } }, results }] }; |
| 59 | + fs.writeFileSync('eslint-results.sarif', JSON.stringify(sarif, null, 2)); |
| 60 | + EOF |
| 61 | +
|
| 62 | + - name: Upload analysis results to GitHub |
| 63 | + if: ${{ always() && hashFiles('eslint-results.sarif') != '' }} |
| 64 | + uses: github/codeql-action/upload-sarif@v4 |
| 65 | + with: |
| 66 | + sarif_file: eslint-results.sarif |
| 67 | + wait-for-processing: true |
0 commit comments