Skip to content

Commit 43daf61

Browse files
Update main.yml
1 parent 62d5b49 commit 43daf61

1 file changed

Lines changed: 15 additions & 3 deletions

File tree

.github/workflows/main.yml

Lines changed: 15 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,13 @@ on:
22
push:
33
branches:
44
- 'main'
5+
56
permissions:
67
id-token: write
78
security-events: write
89
actions: read
910
contents: read
11+
1012
jobs:
1113
build:
1214
runs-on: ubuntu-latest
@@ -19,18 +21,28 @@ jobs:
1921
- name: Configure AWS Credentials
2022
uses: aws-actions/configure-aws-credentials@v2
2123
with:
22-
role-to-assume: arn:aws:iam::385738345149:role/CodeGuruSecurityGitHubAccessRole role-session-name: GitHubActionScript
24+
role-to-assume: arn:aws:iam::385738345149:role/CodeGuruSecurityGitHubAccessRole
25+
aws-region: us-east-1
26+
role-session-name: GitHubActionScript
27+
2328
- name: Run CodeGuru Security Scan
2429
uses: aws-actions/codeguru-security@v1
2530
with:
2631
source_path: .
2732
aws_region: us-east-1
2833
fail_on_severity: Critical
29-
- name: Print Findings
34+
35+
- name: Print Findings (if available)
3036
run: |
3137
ls -l
32-
cat codeguru-security-results.sarif.json
38+
if [ -f "codeguru-security-results.sarif.json" ]; then
39+
cat codeguru-security-results.sarif.json
40+
else
41+
echo "No SARIF results file found."
42+
fi
43+
3344
- name: Upload Result
45+
if: success() # Ensures upload runs only if the previous step succeeds
3446
uses: github/codeql-action/upload-sarif@v2
3547
with:
3648
sarif_file: codeguru-security-results.sarif.json

0 commit comments

Comments
 (0)