safedep/vet
1
0
Fork 0
mirror of https://github.com/safedep/vet.git synced 2025-12-10 12:07:30 -06:00
Code Issues Packages Projects Releases 68 Wiki Activity

Fix CodeQL workflow

Browse Source
This commit is contained in:
abhisek 2023-02-03 12:46:48 +05:30
parent 881808262e
commit 7cc28dab11
No known key found for this signature in database
GPG Key ID: CB92A4990C02A88F
2 changed files with 5 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
.github/workflows/codeql.yml vendored
View File

@ -48,21 +48,9 @@ jobs:
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
# queries: security-extended,security-and-quality # queries: security-extended,security-and-quality
- run: |
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java). go mod tidy
# If this step fails, then you should remove it and run the build manually (see below) go build
- name: Autobuild
uses: github/codeql-action/autobuild@v2
# ℹ️ Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
# If the Autobuild fails above, remove it and uncomment the following three lines.
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
# - run: |
# echo "Run, Build Application using script"
# ./location_of_script_within_repo/buildscript.sh
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2 uses: github/codeql-action/analyze@v2

2
README.md
View File

@ -4,6 +4,8 @@
helps engineering and security teams to identify potential issues in their open helps engineering and security teams to identify potential issues in their open
source dependencies and evaluate them against organizational policies. source dependencies and evaluate them against organizational policies.
[CodeQL](https://github.com/safedep/vet/actions/workflows/codeql.yml/badge.svg?branch=main&event=push)
## TL;DR ## TL;DR
> Ensure `$(go env GOPATH)/bin` is in your `$PATH` > Ensure `$(go env GOPATH)/bin` is in your `$PATH`