Merge pull request #1573 from 0xedward/pysa

Add Pysa starter workflow

code-scanning/properties/pysa.properties.json

@@ -0,0 +1,7 @@
+{
+    "name": "Pysa",
+    "creator": "Meta",
+    "description": "Python Static Analyzer (Pysa) is a security-focused static analysis tool that tracks flows of data from where they originate to where they terminate in a dangerous location.",
+    "iconName": "pysa",
+    "categories": ["Code Scanning", "Python"]
+}

code-scanning/pysa.yml

@@ -0,0 +1,50 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+# This workflow integrates Python Static Analyzer (Pysa) with
+# GitHub's Code Scanning feature.
+#
+# Python Static Analyzer (Pysa) is a security-focused static
+# analysis tool that tracks flows of data from where they
+# originate to where they terminate in a dangerous location.
+#
+# See https://pyre-check.org/docs/pysa-basics/
+
+name: Pysa
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    branches: [ $default-branch ]
+  schedule:
+    - cron: $cron-weekly
+
+permissions:
+    contents: read
+
+jobs:
+  pysa:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          submodules: true
+
+      - name: Run Pysa
+        uses: facebook/pysa-action@f46a63777e59268613bd6e2ff4e29f144ca9e88b
+        with:
+          # To customize these inputs:
+          # See https://github.com/facebook/pysa-action#inputs
+          repo-directory: './'
+          requirements-path: 'requirements.txt'
+          infer-types: true
+          include-default-sapp-filters: true

icons/pysa.svg

@@ -0,0 +1 @@
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 347.36 500"><defs><style>.cls-1{fill:url(#linear-gradient);}</style><linearGradient id="linear-gradient" x1="173.25" y1="41.97" x2="173.25" y2="456.38" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#ff4602"/><stop offset="1" stop-color="#ff9a00"/></linearGradient></defs><path class="cls-1" d="M304,226.54a201,201,0,0,1-7.73,55,160.34,160.34,0,0,1-26.61,52.85l-.48.8L170.37,456.38l-20.66-13.77-2.27-1.49c-.64-.42-1.6-1.05-2.44-1.69-18.48-13.35-28.56-29.05-29.94-46.7-1.77-22.85,13.89-49.56,39.45-75.38l-1.31,35.42,19.8,1,2.77-67.85-71.49-3.2-1,19.79,35.32,1.76L127,315.38a173.75,173.75,0,0,0-43.63,62.67C59.52,345.13,45.88,309.45,42.79,272a223.82,223.82,0,0,1,.59-31.44,216.65,216.65,0,0,1,12.56-55.75,223,223,0,0,1,37-64.37,175,175,0,0,1,22.83-23.62l5-4.52-1.92,6.22c-9.24,30.21-5.13,64.49,9.59,79.76,7.72,8.07,17.65,10.59,29.5,7.43,28.54-7.5,37.27-36.5,39.93-53.12a122.78,122.78,0,0,0,.16-35.19,114.15,114.15,0,0,0-3.19-16.22c-2.67-10.28-6.29-19.28-10.47-26A90.72,90.72,0,0,0,175.36,42a110.14,110.14,0,0,1,21,9.65,113.61,113.61,0,0,1,54.73,105c-1.93,30.42-16.95,59.86-41.22,80.8l-3.42,2.87,1.5-35.29-20.26-1.2-3.23,72.66,71,3,.78-19.83-35.7-1.16L233.23,247a170.28,170.28,0,0,0,54-99.79c1.39,3.14,2.76,6.47,4.08,9.95A195.93,195.93,0,0,1,304,226.54Z"/></svg>