Sync branch's & add ZARN (#40)

* enable all rules of level 5 on linter * add secret scanning in the pipeline * move linter.yml * add a sast * correct the path
htrgouvea · Jan 25, 2024 · fd4b67e · fd4b67e
1 parent 566e160
commit fd4b67e
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 0 deletions.
diff --git a/.github/linter.yml → .github/workflows/linter.yml b/.github/linter.yml → .github/workflows/linter.yml
diff --git a/.github/workflows/zarn.yml b/.github/workflows/zarn.yml
@@ -0,0 +1,25 @@
+name: ZARN
+
+on:
+  pull_request:
+    branches:
+      - main
+      - develop
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+    - name: Install dependencies
+      run: |
+        git clone https://github.com/htrgouvea/zarn
+        sudo apt install -y perl cpanminus
+        cd zarn && sudo cpanm --installdeps .
+    - name: Hunt for findings
+      run: |
+        cd zarn && perl zarn.pl --source ../ --sarif ../zarn.sarif
+    - uses: github/codeql-action/upload-sarif@v3
+      with:
+        sarif_file: zarn.sarif