aboutsummaryrefslogtreecommitdiffstats
path: root/.github/workflows/static-code-analysis.yml
diff options
context:
space:
mode:
authorCôme Chilliet <come.chilliet@nextcloud.com>2023-01-03 14:27:21 +0100
committerCôme Chilliet <come.chilliet@nextcloud.com>2023-01-20 11:22:10 +0100
commit9acb982333f35f001538c51be1a63849357eb59a (patch)
tree398babc1ccb89467e9f8bec08071edd9a9d3aedb /.github/workflows/static-code-analysis.yml
parentf6ed727b3fcb476495ea906032873f33d74c3d62 (diff)
downloadnextcloud-server-9acb982333f35f001538c51be1a63849357eb59a.tar.gz
nextcloud-server-9acb982333f35f001538c51be1a63849357eb59a.zip
Prettify static-code-analysis.yml
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Diffstat (limited to '.github/workflows/static-code-analysis.yml')
-rw-r--r--.github/workflows/static-code-analysis.yml10
1 files changed, 9 insertions, 1 deletions
diff --git a/.github/workflows/static-code-analysis.yml b/.github/workflows/static-code-analysis.yml
index e09cf082589..dbe3dce3e15 100644
--- a/.github/workflows/static-code-analysis.yml
+++ b/.github/workflows/static-code-analysis.yml
@@ -27,8 +27,10 @@ jobs:
- name: Psalm
run: composer run psalm -- --monochrome --no-progress --output-format=github --update-baseline --report=results.sarif
+
- name: Show potential changes in Psalm baseline
run: git diff -- . ':!lib/composer'
+
- name: Upload Analysis results to GitHub
if: always()
uses: github/codeql-action/upload-sarif@v2
@@ -37,21 +39,26 @@ jobs:
static-code-analysis-security:
runs-on: ubuntu-latest
+
steps:
- name: Checkout code
uses: actions/checkout@v3
with:
- submodules: recursive
+ submodules: true
+
- name: Set up php
uses: shivammathur/setup-php@master
with:
php-version: '8.0'
extensions: ctype,curl,dom,fileinfo,gd,intl,json,mbstring,openssl,pdo_sqlite,posix,sqlite,xml,zip
coverage: none
+
- name: Composer install
run: composer i
+
- name: Psalm taint analysis
run: composer run psalm -- --monochrome --no-progress --output-format=github --report=results.sarif --taint-analysis
+
- name: Upload Security Analysis results to GitHub
if: always()
uses: github/codeql-action/upload-sarif@v2
@@ -81,5 +88,6 @@ jobs:
- name: Psalm
run: composer run psalm -- -c psalm-ocp.xml --monochrome --no-progress --output-format=github --update-baseline
+
- name: Show potential changes in Psalm baseline
run: git diff -- . ':!lib/composer'