File tree Expand file tree Collapse file tree 2 files changed +28
-1
lines changed Expand file tree Collapse file tree 2 files changed +28
-1
lines changed Original file line number Diff line number Diff line change
1
+ name : " CodeQL Bicep Extractor"
2
+
3
+ on :
4
+ push :
5
+ branches : [ main ]
6
+ pull_request :
7
+ branches : [ main ]
8
+ workflow_dispatch :
9
+
10
+ jobs :
11
+ build :
12
+ runs-on : ubuntu-latest
13
+ steps :
14
+ - name : " Checkout"
15
+ uses : actions/checkout@v4
16
+
17
+ - name : " CodeQL Bicep Extractor"
18
+ uses : ./
19
+ with :
20
+ token : ${{ secrets.GITHUB_TOKEN }}
21
+
Original file line number Diff line number Diff line change @@ -11,16 +11,22 @@ inputs:
11
11
The GitHub token used to make authenticated API requests.
12
12
default : ${{ github.token }}
13
13
required : false
14
+ outputs :
15
+ sarif-results :
16
+ description : >
17
+ The path to the SARIF results file generated by the extractor.
18
+ value : ${{ steps.extractor.outputs.sarif_results }}
14
19
15
20
runs :
16
21
using : ' composite'
17
22
steps :
18
23
- name : " CodeQL Extractor Action"
19
24
uses : advanced-security/codeql-extractor-action@v0.0.5
25
+ id : extractor
20
26
with :
21
27
token : ${{ inputs.token }}
22
28
extractors : " GitHubSecurityLab/codeql-extractor-bicep@0.1.0"
23
29
packs : GitHubSecurityLab/bicep-queries
24
30
languages : " bicep"
25
31
# Assumes GH is installed
26
- attestation : true
32
+ # attestation: true
You can’t perform that action at this time.
0 commit comments