Skip to content

Actually bump the dependency version #20

Actually bump the dependency version

Actually bump the dependency version #20

# pull request action verification
name: MSDO On Push Verification
on:
push:
branches:
- '**'
permissions:
id-token: write # This is required for federation to Defender for DevOps
security-events: write # This is required to upload SARIF files
jobs:
sample:
name: MSDO on ${{ matrix.os }}
runs-on: ${{ matrix.os }}
strategy:
matrix:
os: [windows-latest, ubuntu-latest]
steps:
# Checkout your code repository to scan
- uses: actions/checkout@v3
# Run analyzers
- uses: ./
id: msdo
with:
existingFilename: sda.sarif
# Upload alerts to the Security tab
- name: Upload alerts to Security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: ${{ steps.msdo.outputs.sarifFile }}
# Upload alerts file as a workflow artifact
- name: Upload alerts file as a workflow artifact
uses: actions/upload-artifact@v3
with:
name: alerts
path: ${{ steps.msdo.outputs.sarifFile }}