Skip to content

Code Scanning

Code Scanning #51

Workflow file for this run

name: "Code Scanning"
on:
push:
branches: [ "main" ]
pull_request:
branches: [ "main" ]
schedule:
- cron: '37 15 * * 3'
permissions:
actions: read
contents: read
security-events: write
jobs:
codeql:
name: CodeQL Scan
runs-on: ubuntu-latest
timeout-minutes: 360
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: go
- name: Autobuild
uses: github/codeql-action/autobuild@v2
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
with:
category: "/language:go"
trivy:
name: Trivy
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Run Trivy
uses: aquasecurity/trivy-action@master
with:
scan-type: fs
scan-ref: .
trivy-config: trivy.yaml
format: sarif
output: trivy.sarif
- name: Upload Sarif output
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: trivy.sarif