mirror of
https://github.com/nextcloud/server.git
synced 2026-02-18 02:10:56 -05:00
91491bdd05
The action will otherwise pull dev-master and this can break easily as we just experience. Signed-off-by: MichaIng <micha@dietpi.com>
26 lines
590 B
YAML
26 lines
590 B
YAML
name: Psalm Security Analysis
|
|
|
|
on:
|
|
push:
|
|
pull_request:
|
|
schedule:
|
|
- cron: '0 0 * * 0'
|
|
|
|
jobs:
|
|
psalm:
|
|
name: Psalm
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v2
|
|
with:
|
|
submodules: recursive
|
|
- name: Psalm
|
|
uses: docker://vimeo/psalm-github-actions:4.9.3
|
|
with:
|
|
security_analysis: true
|
|
report_file: results.sarif
|
|
- name: Upload Security Analysis results to GitHub
|
|
uses: github/codeql-action/upload-sarif@v1
|
|
with:
|
|
sarif_file: results.sarif
|