From 3bd0e9b6125fbc229a7fc0d8ad2e31c25ab304dd Mon Sep 17 00:00:00 2001 From: Jamie Scott Date: Mon, 10 Apr 2023 13:55:58 -0700 Subject: [PATCH] Create scan.yml --- .github/workflows/scan.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/scan.yml diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml new file mode 100644 index 0000000..6f29bad --- /dev/null +++ b/.github/workflows/scan.yml @@ -0,0 +1,29 @@ +name: Scan + +on: + push: + branches: [ main ] + pull_request: + branches: [ main ] + +jobs: + scan: + permissions: + security-events: write + contents: read + id-token: write + runs-on: ubuntu-latest + steps: + - name: Checkout Repository + uses: actions/checkout@v3 + - name: Run endorctl + uses: endorlabs/github-action@b51bd06466b545f01a6ac788e3e1147695d3936c + with: + namespace: "demo" + api: "https://api.staging.endorlabs.com" + enable_github_action_token: "true" + sarif_file: findings.sarif + - name: Upload SARIF to github + uses: github/codeql-action/upload-sarif@9885f86fab4879632b7e44514f19148225dfbdcd + with: + sarif_file: findings.sarif