Add SAST scan using SonarCloud in GitHub Actions workflow

MarceloBxD · Apr 23, 2024 · c3d3590 · c3d3590
1 parent 28f7f9f
commit c3d3590
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -18,6 +18,12 @@ jobs:
         uses: actions/setup-node@v1
         with:
           node-version: "20.x"
+      - name: SAST Scan on Source Code using SonarCloud
+        uses: sonarsource/sonarcloud-github-action@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+
       - name: Install dependencies
         run: npm install
       - name: Run tests