Skip to content

chore(deps): bump actions/checkout from 4.1.1 to 4.1.4 #967

chore(deps): bump actions/checkout from 4.1.1 to 4.1.4

chore(deps): bump actions/checkout from 4.1.1 to 4.1.4 #967

Workflow file for this run

name: "[SARIF] Run Scan Action"
on: [push, pull_request]
jobs:
sarif-image:
runs-on: ubuntu-latest
steps:
- name: Checkout the code
uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
- name: Run the local Scan Action with SARIF generation enabled
id: scan
uses: ./
with:
image: "debian:8"
fail-build: false
#severity-cutoff: "Medium"
- name: Inspect Generated SARIF
run: cat ${{ steps.scan.outputs.sarif }}
# Commented out to prevent incorrect SARIF uploads for this action
# TODO: add functional tests that validate this
# - name: Upload SARIF
# uses: github/codeql-action/upload-sarif@v2
# with:
# sarif_file: ${{ steps.scan.outputs.sarif }}
sarif-directory:
runs-on: ubuntu-latest
steps:
- name: Checkout the code
uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
- name: Run the local Scan Action with SARIF generation enabled
id: scan
uses: ./
with:
path: "tests/fixtures/npm-project"
fail-build: false
#severity-cutoff: "Medium"
- name: Inspect Generated SARIF
run: cat ${{ steps.scan.outputs.sarif }}
# Commented out to prevent incorrect SARIF uploads for this action
# TODO: add functional tests that validate this
# - name: Upload SARIF
# uses: github/codeql-action/upload-sarif@v2
# with:
# sarif_file: ${{ steps.scan.outputs.sarif }}