From 9ca611ec8488ffc2c8368616ab088ef893f25c76 Mon Sep 17 00:00:00 2001 From: htrgouvea Date: Sun, 28 Jan 2024 14:06:48 -0300 Subject: [PATCH] create zarn sast --- .github/workflows/zarn.yml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 .github/workflows/zarn.yml diff --git a/.github/workflows/zarn.yml b/.github/workflows/zarn.yml new file mode 100644 index 0000000..cf8981b --- /dev/null +++ b/.github/workflows/zarn.yml @@ -0,0 +1,25 @@ +name: ZARN SAST + +on: + push: + branches: [ "main" ] + pull_request: + branches: [ "main" ] + schedule: + - cron: '28 23 * * 1' + +jobs: + zarn: + name: Security Static Analysis with ZARN + runs-on: ubuntu-20.04 + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Perform Static Analysis + uses: htrgouvea/zarn@0.0.9 + + - name: Send result to Github Security + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: result.sarif \ No newline at end of file