FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
nHapi/.github/workflows/codacy.yml at master · nHapiNET/nHapi · GitHub
Uh oh!
There was an error while loading.
Please reload this page
.
nHapiNET
/
nHapi
Public
Notifications
You must be signed in to change notification settings
Fork
164
Star
311
Code
Issues
24
Pull requests
10
Discussions
Actions
Projects
Wiki
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Wiki
Security and quality
Insights
Expand file tree
Breadcrumbs
nHapi
/
.github
/
workflows
/
codacy.yml
Copy path
View runs
More file actions
More file actions
Latest commit
History
History
History
72 lines (63 loc) · 2.98 KB
Breadcrumbs
nHapi
/
.github
/
workflows
/
codacy.yml
Copy path
File metadata and controls
72 lines (63 loc) · 2.98 KB
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
#
This workflow uses actions that are not certified by GitHub.
#
They are provided by a third-party and are governed by
#
separate terms of service, privacy policy, and support
#
documentation.
#
This workflow checks out code, performs a Codacy security scan
#
and integrates the results with the
#
GitHub Advanced Security code scanning feature. For more information on
#
the Codacy security scan action usage and parameters, see
#
https://github.com/codacy/codacy-analysis-cli-action.
#
For more information on Codacy Analysis CLI in general, see
#
https://github.com/codacy/codacy-analysis-cli.
name
:
Codacy Security Scan
on
:
push
:
branches
:
[master]
pull_request
:
#
The branches below must be a subset of the branches above
branches
:
[master]
schedule
:
-
cron
:
"
17 1 * * 3
"
permissions
:
contents
:
read
jobs
:
codacy-security-scan
:
permissions
:
contents
:
read
#
for actions/checkout to fetch code
security-events
:
write
#
for github/codeql-action/upload-sarif to upload SARIF results
name
:
Codacy Security Scan
runs-on
:
ubuntu-latest
steps
:
#
Checkout the repository to the GitHub Actions runner
-
name
:
Checkout code
uses
:
actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
#
v6.0.2
#
Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
-
name
:
Run Codacy Analysis CLI
uses
:
codacy/codacy-analysis-cli-action@562ee3e92b8e92df8b67e0a5ff8aa8e261919c08
#
v4.4.7
with
:
#
Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository
#
You can also omit the token and run the tools that support default configurations
project-token
:
${{ secrets.CODACY_PROJECT_TOKEN }}
verbose
:
true
output
:
results-codacy.sarif
format
:
sarif
#
Adjust severity of non-security issues
gh-code-scanning-compat
:
true
#
Force 0 exit code to allow SARIF file generation
#
This will handover control about PR rejection to the GitHub side
max-allowed-issues
:
2147483647
#
Merge multiple SARIF runs into a single run to comply with GitHub's July 2025
#
requirement that each upload must have a single run per category.
#
See: https://github.blog/changelog/2025-07-21-code-scanning-will-stop-combining-multiple-sarif-runs-uploaded-in-the-same-sarif-file/
-
name
:
Merge SARIF runs into single run
if
:
hashFiles('results-codacy.sarif') != ''
run
:
|
chmod +x ./scripts/merge-sarif-runs.sh
./scripts/merge-sarif-runs.sh results-codacy.sarif
#
Upload the SARIF file generated in the previous step
-
name
:
Upload SARIF results file
uses
:
github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98
#
v4.32.6
if
:
hashFiles('results-codacy.sarif') != ''
with
:
sarif_file
:
results-codacy.sarif
category
:
codacy
Back
|
FazBrowse Home
|
New Git URL