mirror of
https://github.com/Yubico/yubico-pam.git
synced 2025-02-01 19:52:19 +01:00
dac07a76f0
Might be new scanner versions or scanners added. This will make sure new better (?) scanners will be run on repos that might not have that much activity
37 lines
893 B
YAML
37 lines
893 B
YAML
name: static code analysis
|
|
|
|
on:
|
|
push:
|
|
schedule:
|
|
- cron: '0 0 * * 1'
|
|
|
|
env:
|
|
SCAN_IMG:
|
|
yes-docker-local.artifactory.in.yubico.org/static-code-analysis/c:v1
|
|
COMPILE_DEPS: "libykclient-dev libykpers-1-dev libyubikey-dev"
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- uses: actions/checkout@master
|
|
|
|
- name: Prep scan
|
|
run: |
|
|
docker login yes-docker-local.artifactory.in.yubico.org/ \
|
|
-u svc-static-code-analysis-reader \
|
|
-p ${{ secrets.ARTIFACTORY_READER_TOKEN }}
|
|
docker pull ${SCAN_IMG}
|
|
|
|
- name: Scan and fail if warnings
|
|
run: |
|
|
docker run -v${PWD}:/k -e COMPILE_DEPS="${COMPILE_DEPS}" \
|
|
-e PROJECT_NAME=${GITHUB_REPOSITORY#Yubico/} -t ${SCAN_IMG}
|
|
|
|
- uses: actions/upload-artifact@master
|
|
if: failure()
|
|
with:
|
|
name: suppression_files
|
|
path: suppression_files
|