aboutsummaryrefslogtreecommitdiffstats
path: root/.github/workflows/static-code-analysis.yml
diff options
context:
space:
mode:
Diffstat (limited to '.github/workflows/static-code-analysis.yml')
-rw-r--r--.github/workflows/static-code-analysis.yml6
1 files changed, 5 insertions, 1 deletions
diff --git a/.github/workflows/static-code-analysis.yml b/.github/workflows/static-code-analysis.yml
index 63ad51a26c6..c5e8e957077 100644
--- a/.github/workflows/static-code-analysis.yml
+++ b/.github/workflows/static-code-analysis.yml
@@ -60,7 +60,11 @@ jobs:
run: composer i
- name: Psalm taint analysis
- run: composer run psalm:security -- --threads=1 --monochrome --no-progress --output-format=github --report=results.sarif
+ run: composer run psalm:security -- --threads=1 --monochrome --no-progress --output-format=github --update-baseline --report=results.sarif
+
+ - name: Show potential changes in Psalm baseline
+ if: always()
+ run: git diff --exit-code -- . ':!lib/composer'
- name: Upload Security Analysis results to GitHub
if: always()