Skip to content

Bump JetBrains/qodana-action from 2023.3.1 to 2024.3.2 #906

Bump JetBrains/qodana-action from 2023.3.1 to 2024.3.2

Bump JetBrains/qodana-action from 2023.3.1 to 2024.3.2 #906

Workflow file for this run

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
name: devskim
on:
push:
branches: [ "main" ]
pull_request:
branches: [ "main" ]
schedule:
- cron: '23 9 * * 0'
permissions:
contents: read
jobs:
lint:
name: devskim
runs-on: ubuntu-22.04
permissions:
actions: read
contents: read
security-events: write
steps:
- name: harden runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
api.github.com:443
github.com:443
- name: checkout
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: run devskim scanner
uses: microsoft/DevSkim-Action@b41921d947434b27f90b8949f8bfbe056e706bf6 # v1.0.11
- name: upload
uses: github/codeql-action/upload-sarif@3ab4101902695724f9365a384f86c1074d94e18c # v3.24.7
with:
sarif_file: devskim-results.sarif