Skip to content

Commit 094f4d3

Browse files
committed
feat(ci): Update Action
1 parent 28a037e commit 094f4d3

File tree

2 files changed

+28
-1
lines changed

2 files changed

+28
-1
lines changed

.github/workflows/self-action.yml

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: "CodeQL Bicep Extractor"
2+
3+
on:
4+
push:
5+
branches: [ main ]
6+
pull_request:
7+
branches: [ main ]
8+
workflow_dispatch:
9+
10+
jobs:
11+
build:
12+
runs-on: ubuntu-latest
13+
steps:
14+
- name: "Checkout"
15+
uses: actions/checkout@v4
16+
17+
- name: "CodeQL Bicep Extractor"
18+
uses: ./
19+
with:
20+
token: ${{ secrets.GITHUB_TOKEN }}
21+

action.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,16 +11,22 @@ inputs:
1111
The GitHub token used to make authenticated API requests.
1212
default: ${{ github.token }}
1313
required: false
14+
outputs:
15+
sarif-results:
16+
description: >
17+
The path to the SARIF results file generated by the extractor.
18+
value: ${{ steps.extractor.outputs.sarif_results }}
1419

1520
runs:
1621
using: 'composite'
1722
steps:
1823
- name: "CodeQL Extractor Action"
1924
uses: advanced-security/codeql-extractor-action@v0.0.5
25+
id: extractor
2026
with:
2127
token: ${{ inputs.token }}
2228
extractors: "GitHubSecurityLab/codeql-extractor-bicep@0.1.0"
2329
packs: GitHubSecurityLab/bicep-queries
2430
languages: "bicep"
2531
# Assumes GH is installed
26-
attestation: true
32+
# attestation: true

0 commit comments

Comments
 (0)