Edit workflow for testing' #14

	# pull request action verification

	name: MSDO On Push Verification
	on:
	push:
	branches:
	- '**'

	permissions:
	id-token: write # This is required for federation to Defender for DevOps
	security-events: write # This is required to upload SARIF files

	jobs:
	sample:
	name: MSDO on ${{ matrix.os }}
	runs-on: ${{ matrix.os }}

	strategy:
	matrix:
	os: [windows-latest, ubuntu-latest]

	steps:

	# Checkout your code repository to scan
	- uses: actions/checkout@v3

	# Run analyzers
	- uses: microsoft/security-devops-action@main
	id: msdo
	env:
	checkov_skippath: 'SecureApp'
	with:
	tools: 'checkov'

	# Upload alerts to the Security tab
	- name: Upload alerts to Security tab
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: ${{ steps.msdo.outputs.sarifFile }}

	# Upload alerts file as a workflow artifact
	- name: Upload alerts file as a workflow artifact
	uses: actions/upload-artifact@v3
	with:
	name: alerts
	path: ${{ steps.msdo.outputs.sarifFile }}

Provide feedback