Create securitycodescan.yml #26

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	# This workflow integrates SecurityCodeScan with GitHub's Code Scanning feature
	# SecurityCodeScan is a vulnerability patterns detector for C# and VB.NET

	name: SecurityCodeScan

	on:
	push:
	branches: [ "main", "v4" ]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [ "main" ]
	schedule:
	- cron: '31 12 * * 5'

	jobs:
	SCS:
	runs-on: windows-latest
	steps:
	- uses: actions/checkout@v3
	- uses: nuget/setup-nuget@v1
	- uses: microsoft/[email protected]

	- name: Install .NET Core SDK
	uses: actions/setup-dotnet@v2
	with:
	dotnet-version: '3.1.410'

	- name: Set up projects for analysis
	uses: security-code-scan/security-code-scan-add-action@f8ff4f2763ed6f229eded80b1f9af82ae7f32a0d

	- name: Restore dependencies
	run: dotnet restore src/Appium.Net.sln

	- name: Build with dotnet
	run: dotnet build src/Appium.Net.sln --configuration Release --no-restore

	- name: Convert sarif for uploading to GitHub
	uses: security-code-scan/security-code-scan-results-action@cdb3d5e639054395e45bf401cba8688fcaf7a687

	- name: Upload sarif
	uses: github/codeql-action/upload-sarif@v2

Provide feedback