From befd88d396a141cb35075fea5b66cf643ca27ee1 Mon Sep 17 00:00:00 2001 From: Ionut Mihai Sandu <50211080+mike-ionut-mihai-sandu-tao@users.noreply.github.com> Date: Thu, 23 Mar 2023 11:50:16 +0100 Subject: [PATCH 1/2] Create psalm.yml Signed-off-by: Ionut Mihai Sandu <50211080+mike-ionut-mihai-sandu-tao@users.noreply.github.com> --- .github/workflows/psalm.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .github/workflows/psalm.yml diff --git a/.github/workflows/psalm.yml b/.github/workflows/psalm.yml new file mode 100644 index 00000000000..ffc31211dac --- /dev/null +++ b/.github/workflows/psalm.yml @@ -0,0 +1,14 @@ +name: Psalm Static analysis + +on: [push, pull_request] + +jobs: + psalm: + name: Psalm + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v2 + + - name: Psalm + uses: docker://ghcr.io/psalm/psalm-github-actions From 6ff84038f04e278b9eae1255da83066dc62311d8 Mon Sep 17 00:00:00 2001 From: Ionut Mihai Sandu <50211080+mike-ionut-mihai-sandu-tao@users.noreply.github.com> Date: Thu, 23 Mar 2023 13:16:51 +0100 Subject: [PATCH 2/2] Update psalm.yml Signed-off-by: Ionut Mihai Sandu <50211080+mike-ionut-mihai-sandu-tao@users.noreply.github.com> --- .github/workflows/psalm.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/psalm.yml b/.github/workflows/psalm.yml index ffc31211dac..ffb9514140c 100644 --- a/.github/workflows/psalm.yml +++ b/.github/workflows/psalm.yml @@ -12,3 +12,10 @@ jobs: - name: Psalm uses: docker://ghcr.io/psalm/psalm-github-actions + with: + security_analysis: true + report_file: results.sarif + - name: Upload Security Analysis results to GitHub + uses: github/codeql-action/upload-sarif@v1 + with: + sarif_file: results.sarif