Skip to content

fix(deps): update actions/upload-artifact action to v4.3.4 #65

fix(deps): update actions/upload-artifact action to v4.3.4

fix(deps): update actions/upload-artifact action to v4.3.4 #65

name: Code analysis using Codacy
on:
pull_request:
types: [opened, synchronize, reopened]
branches:
- main
workflow_dispatch: {}
workflow_call:
inputs:
harden_runner:
description: 'Harden the runner'
required: false
default: true
type: boolean
permissions: {}
concurrency:
group: codacy-${{ github.repository }}-${{ github.head_ref }}
cancel-in-progress: true
jobs:
codacy:
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
id-token: write
steps:
- name: Harden the runner
uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
if: ${{ inputs.harden_runner != false }}
with:
egress-policy: audit
- name: Checkout repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Run Codacy Analysis CLI
uses: codacy/codacy-analysis-cli-action@3ff8e64eb4b714c4bee91b7b4eea31c6fc2c4f93 # v4.4.1
with:
output: codacy.sarif
format: sarif
gh-code-scanning-compat: true
- name: Upload results to code-scanning
uses: github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
with:
sarif_file: codacy.sarif