SecurityCodeScan
ActionsTags
(2)This action is designed to run as part of a workflow that builds projects referencing NuGet SecurityCodeScan.VS2019.
It produces a GitHub compatible SARIF file for uploading to the repository 'Code scanning alerts'.
See action.yml
sarif_directory: (optional) The output directory where SARIF files should be collected.
on:
push:
jobs:
SCS:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Set up projects
uses: security-code-scan/security-code-scan-add-action@v1.2
- name: Build
run: |
dotnet restore
dotnet build
- name: Convert sarif for uploading to GitHub
uses: security-code-scan/security-code-scan-results-action@v1
- name: Upload sarif
uses: github/codeql-action/upload-sarif@v1For .NET 4.x example see FullDotNetWebApp demo repository.
SecurityCodeScan is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.
Tags
(2)SecurityCodeScan is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.