11name : " Code Scanning"
2-
32on :
43 push :
54 branches : [ develop*, release/**, beta/** ]
87 schedule :
98 - cron : ' 34 8 * * 2'
109 workflow_dispatch :
11-
1210jobs :
1311 codeql :
1412 name : CodeQL
@@ -17,60 +15,22 @@ jobs:
1715 actions : read
1816 contents : read
1917 security-events : write
20-
2118 strategy :
2219 fail-fast : false
2320 matrix :
2421 language : [ 'csharp' ]
25-
2622 steps :
2723 - name : Checkout repository
2824 uses : actions/checkout@v4
29-
3025 - name : Setup .NET
3126 uses : actions/setup-dotnet@v4
3227 with :
3328 dotnet-version : 8.x.x
34-
3529 - name : Initialize CodeQL
3630 uses : github/codeql-action/init@v3
3731 with :
3832 languages : ${{ matrix.language }}
39-
4033 - name : Build
4134 run : dotnet build src/EPPlus.sln --configuration Release
42-
4335 - name : Perform CodeQL Analysis
4436 uses : github/codeql-action/analyze@v3
45-
46- security-code-scan :
47- name : Security Code Scan
48- runs-on : windows-latest
49- permissions :
50- actions : read
51- contents : read
52- security-events : write
53-
54- steps :
55- - name : Checkout repository
56- uses : actions/checkout@v4
57-
58- - name : Setup .NET
59- uses : actions/setup-dotnet@v4
60- with :
61- dotnet-version : 8.x.x
62-
63- - name : Install Security Code Scan
64- run : dotnet tool install --global security-scan
65-
66- - name : Build
67- run : dotnet build src/EPPlus.sln --configuration Release
68-
69- - name : Run Security Code Scan
70- run : security-scan src/EPPlus.sln --export=scs-results.sarif
71-
72- - name : Upload Security Code Scan results
73- uses : github/codeql-action/upload-sarif@v3
74- with :
75- sarif_file : scs-results.sarif
76- category : security-code-scan
0 commit comments