forked from PhantomBot/PhantomBot
-
Notifications
You must be signed in to change notification settings - Fork 0
37 lines (33 loc) · 948 Bytes
/
devskim.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
name: DevSkim
on:
push:
branches:
- 'master'
paths-ignore:
- 'docs/**'
- 'resources/java-runtime**'
pull_request:
branches:
- '*'
schedule:
- cron: 0 12 * * *
workflow_dispatch:
jobs:
lint:
name: DevSkim
runs-on: ubuntu-20.04
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Run DevSkim scanner
uses: microsoft/DevSkim-Action@v1
with:
ignore-globs: "dist/**/*,resources/java-runtime*/**/*,resources/web/common/js/jquery-ui/**/*,resources/web/panel/vendors/**/*,docs/common/**/*,docs/panel/**/*,docs/panel-stable/**/*,docs/javadoc/**/*,docs/javadoc-stable/**/*"
- name: Upload DevSkim scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: devskim-results.sarif