Skip to content

Update cloud_code_scan.yml #13

Update cloud_code_scan.yml

Update cloud_code_scan.yml #13

Workflow file for this run

# This is a basic workflow to help you get started with Actions
name: SOOS SCA SARIF Example CI
# Controls when the workflow will run
on:
# Triggers the workflow on push or pull request events but only for the main branch
push:
branches: [ master ]
pull_request:
branches: [ master ]
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
# This workflow contains a single job called "build"
build:
# The type of runner that the job will run on
runs-on: ubuntu-latest
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v3
# Runs a single command using the runners shell
- name: SOOS SCA Analysis
uses: soos-io/soos-sca-github-action@v2
with:
project_name: "<repository_owner>/<repository_name>" # Also you can use the var ${{ github.repository }}
output_format: "sarif"
client_id: ${{ secrets.SOOS_CLIENT_ID }}
api_key: ${{ secrets.SOOS_API_KEY }}