zerobyte/.github/workflows/ci.yml
2025-12-18 17:53:25 +01:00

35 lines
652 B
YAML

name: Checks
permissions:
contents: read
security-events: write
on:
pull_request:
branches:
- main
push:
branches:
- main
jobs:
ci:
timeout-minutes: 15
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v5
with:
fetch-depth: 0
ref: ${{ github.ref }}
- name: Scan current project
id: scan
uses: anchore/scan-action@v6
with:
path: "."
- name: upload Anchore scan SARIF report
uses: github/codeql-action/upload-sarif@v4
with:
sarif_file: ${{ steps.scan.outputs.sarif }}