Skip to content

Commit

Permalink
Update sample template
Browse files Browse the repository at this point in the history
  • Loading branch information
tobyash86 committed Apr 9, 2021
1 parent 9880a69 commit 83b58a0
Showing 1 changed file with 21 additions and 18 deletions.
39 changes: 21 additions & 18 deletions samples/run-dottest-analyzer-template.yml
Original file line number Diff line number Diff line change
@@ -1,38 +1,41 @@
# This workflow runs Parasoft dotTEST with GitHub's code scanning feature
# Parasoft dotTEST is SAST tool which provides thorough security analysis for various security standards
# Visit https://github.com/parasoft/run-dottest-action for help
name: Parasoft dotTEST Code Scan
# This workflow runs Parasoft dotTEST to analyze code
# and display results with Github code scanning alerts.
# Parasoft dotTEST is a testing tool that provides code analysis techniques
# to improve code quality and ensure compliance with industry standards.
# See https://github.com/parasoft/run-dottest-action for more information.

name: Parasoft dotTEST Code Analysis

on:
push:
branches: [ $default-branch, $protected-branches ]
pull_request:
# The branches below must be a subset of the branches above
# The branches below must be a subset of the branches above.
branches: [ $default-branch ]
schedule:
- cron: $cron-weekly

# Allows you to run this workflow manually from the Actions tab
# Allows you to run this workflow manually from the Actions tab.
workflow_dispatch:

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
# A workflow run is made up of one or more jobs that can run sequentially or in parallel.
jobs:
# This workflow contains a single job called "run-dottest-analyzer"
run-dottest-analyzer:
# Display name of the job
name: Analyze workspace with dotTEST
# The type of runner that the job will run on
# This workflow is made up of one job "run-dottest-action".
run-dottest-action:
# Specifies the name of the job.
name: Run code analysis with dotTEST
# Specifies the type of runner that the job will run on.
runs-on: self-hosted

# Steps represent a sequence of tasks that will be executed as part of the job
# Steps represent a sequence of tasks that will be executed as part of the job.
steps:

# Checks out your repository, so that your job can access it
- name: Checkout code
# Checks out your repository, so that your job can access it.
- name: Check out code
uses: actions/checkout@v2

# ---------------------------------------------------------------
# Run Parasoft dotTEST Analysis and generate .sarif report
# Runs code analysis with dotTEST and generates a .sarif report.
- name: Run Parasoft dotTEST
id: dottest
uses: parasoft/run-dottest-action@1.1.1
Expand Down Expand Up @@ -87,15 +90,15 @@ jobs:
#sarifMode: # optional, default is builtin

# ---------------------------------------------------------------
# Archive reports from analysis as job artifacts.
# Uploads an archive that includes all report files (.xml, .html, .sarif).
- name: Upload report artifacts
uses: actions/upload-artifact@v2
with:
name: Report files
path: ${{ steps.dottest.outputs.reportDir }}/*.*

# ---------------------------------------------------------------
# Upload analysis results to GitHub to be reviewed as code scanning alerts.
# Uploads analysis results in the SARIF format, so that they are displayed as GitHub code scanning alerts.
- name: Upload results to GitHub
uses: github/codeql-action/upload-sarif@v1
with:
Expand Down

0 comments on commit 83b58a0

Please sign in to comment.