File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 22 push :
33 branches :
44 - ' main'
5+
56permissions :
67 id-token : write
78 security-events : write
89 actions : read
910 contents : read
11+
1012jobs :
1113 build :
1214 runs-on : ubuntu-latest
@@ -19,18 +21,28 @@ jobs:
1921 - name : Configure AWS Credentials
2022 uses : aws-actions/configure-aws-credentials@v2
2123 with :
22- role-to-assume : arn:aws:iam::385738345149:role/CodeGuruSecurityGitHubAccessRole role-session-name: GitHubActionScript
24+ role-to-assume : arn:aws:iam::385738345149:role/CodeGuruSecurityGitHubAccessRole
25+ aws-region : us-east-1
26+ role-session-name : GitHubActionScript
27+
2328 - name : Run CodeGuru Security Scan
2429 uses : aws-actions/codeguru-security@v1
2530 with :
2631 source_path : .
2732 aws_region : us-east-1
2833 fail_on_severity : Critical
29- - name : Print Findings
34+
35+ - name : Print Findings (if available)
3036 run : |
3137 ls -l
32- cat codeguru-security-results.sarif.json
38+ if [ -f "codeguru-security-results.sarif.json" ]; then
39+ cat codeguru-security-results.sarif.json
40+ else
41+ echo "No SARIF results file found."
42+ fi
43+
3344 - name : Upload Result
45+ if : success() # Ensures upload runs only if the previous step succeeds
3446 uses : github/codeql-action/upload-sarif@v2
3547 with :
3648 sarif_file : codeguru-security-results.sarif.json
You can’t perform that action at this time.
0 commit comments