Skip to content

Commit 118b2f5

Browse files
authored
Update README.md
1 parent 3bf0bee commit 118b2f5

File tree

1 file changed

+44
-2
lines changed

1 file changed

+44
-2
lines changed

README.md

Lines changed: 44 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,44 @@
1-
# security-code-scan-add-action
2-
GitHub Action to integrate https://github.com/security-code-scan/security-code-scan into CI/CD process.
1+
# Security-Code-Scan Action
2+
3+
This action is designed to run as part of a workflow that builds projects referencing NuGet [SecurityCodeScan.VS2019](https://www.nuget.org/packages/SecurityCodeScan.VS2019/).
4+
5+
It produces a GitHub compatible SARIF file for uploading to the repository 'Code scanning alerts'.
6+
7+
# Usage
8+
9+
See [action.yml](action.yml)
10+
11+
### Input Parameters
12+
13+
**sarif_directory**: _(optional)_ The output directory where SARIF files should be collected.
14+
15+
### Workflow Examples
16+
17+
The recommended way to add this action to your workflow is with a subsequent action that uploads the prepared SARIF files to the repository 'Code scanning alerts'.
18+
19+
```yaml
20+
on:
21+
push:
22+
23+
jobs:
24+
SCS:
25+
runs-on: ubuntu-latest
26+
steps:
27+
- uses: actions/checkout@v2
28+
29+
- name: Set up projects
30+
uses: security-code-scan/security-code-scan-add-action@v1.0
31+
32+
- name: Build
33+
run: |
34+
dotnet restore
35+
dotnet build
36+
37+
- name: Convert sarif for uploading to GitHub
38+
uses: security-code-scan/security-code-scan-results-action@v1.2
39+
40+
- name: Upload sarif
41+
uses: github/codeql-action/upload-sarif@v1
42+
```
43+
44+
For .NET 4.x example see [FullDotNetWebApp demo repository](https://github.com/security-code-scan/FullDotNetWebApp).

0 commit comments

Comments
 (0)