Timo Behrendt
f44945c1d6
All checks were successful
Run TAS / run-tas (push) Successful in 16s
Reviewed-on: #60 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
32 lines
1022 B
YAML
32 lines
1022 B
YAML
name: Run TAS
|
|
|
|
on:
|
|
pull_request:
|
|
workflow_dispatch:
|
|
inputs:
|
|
branch:
|
|
description: "The branch to run TAS on"
|
|
required: true
|
|
default: "main"
|
|
schedule:
|
|
- cron: "0 6 * * 5"
|
|
|
|
jobs:
|
|
run-tas:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@1.3.1
|
|
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@1.3.1
|
|
- env:
|
|
TRIVY_CACHE_DIR: ${{ runner.temp }}/trivy
|
|
run: |
|
|
trivy fs --cache-dir "$TRIVY_CACHE_DIR" --exit-code 0 --format sarif --output sarif.json .
|
|
- uses: https://gitea.t000-n.de/t.behrendt/tas-actions/tas-upload-sarif@0.0.3
|
|
with:
|
|
tas-base-url: ${{ vars.TAS_BASE_URL }}
|
|
sarif-file: sarif.json
|
|
owner: t.behrendt
|
|
repo: conventional-semantic-git-tag-increment
|
|
branch: ${{ inputs.branch || github.head_ref || 'main' }}
|