Files

T

Andreas Dangel d580918e06 Update pmd to v1.2.0

* Use pmd/pmd-github-action@967a81f8b6
   which is v1.2.0
* Remove "cache: maven" setting, which fails if no pom.xml file
   is existing
* Set parameter "analyzeModifiedFilesOnly: false" to prevent incomplete
   analysis results. See also https://github.com/pmd/pmd-github-action/issues/35

2022-02-10 18:10:25 +01:00

properties

Fixing some code scanning workflows description

2022-01-31 10:48:11 +00:00

anchore.yml

updated gh_token permissions for anchore/scan-action

2022-01-31 14:29:11 +05:30

apisec-scan.yml

Removed the unwanted space in actions file.

2021-12-01 13:27:02 +05:30

brakeman.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

checkmarx.yml

Create checkmarx.yml

2022-02-01 22:34:47 +05:30

cloudrail.yml

Correct character-case of "c" in Cloudrail

2021-10-06 12:52:26 -07:00

codacy.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

codeql.yml

Add ruby and update workflow

2021-10-21 22:11:00 +02:00

codescan.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

crunch42.yml

Update crunch42.yml

2022-01-27 15:38:23 +05:30

detekt.yml

find a way to pin the SHA for detekt workflow template

2021-11-23 21:14:53 +01:00

devskim.yml

Update devskim.yml

2021-05-26 08:37:19 -07:00

flawfinder.yml

Replace action tag with commit hash.

2021-07-28 14:08:48 -07:00

fortify.yml

File renames as requested in PR comments

2021-09-28 10:24:29 +02:00

kubesec.yml

include actions:read for all code scanning workflows

2021-04-23 14:06:00 -05:00

mayhem-for-api.yml

Remoev mention of trial for Mayhem for API

2021-09-29 13:45:57 -06:00

mobsf.yml

Update code-scanning/mobsf.yml

2021-10-25 21:40:31 -04:00

msvc.yml

Update commit SHA

2021-10-26 21:48:19 -07:00

njsscan.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

nowsecure.yml

Add NowSecure starter workflow

2021-11-15 08:40:01 -05:00

ossar.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

pmd.yml

Update pmd to v1.2.0

2022-02-10 18:10:25 +01:00

powershell.yml

Add psscriptanalyzer code scanning

2021-04-22 01:41:31 +03:00

prisma.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

README.md

Fix broken link in README.md

2021-04-17 14:08:56 -04:00

rubocop.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

scorecards.yml

Scorecards: update hash to v1.0.2

2022-01-24 08:27:33 -08:00

securitycodescan.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

semgrep.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

shiftleft.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

snyk-container.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

snyk-infrastructure.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

stackhawk.yml

update hawkscan-action reference to commit hash

2021-06-28 16:05:58 -06:00

synopsys-io.yml

include actions:read for all code scanning workflows

2021-04-23 14:06:00 -05:00

sysdig-scan.yml

Reviews from PR #1110

2021-09-21 11:03:21 +02:00

tfsec.yml

Update the tfsec ref point

2021-05-21 08:39:23 +01:00

trivy.yml

updated permission

2022-01-26 22:42:19 +05:30

veracode.yml

remove unnecessary uses of the upload-artifact action and improve input file name

2021-12-07 11:35:26 +01:00

xanitizer.yml

add a bunch of code scanning workflows

2021-11-19 16:55:27 +01:00

README.md

Code Scanning Workflows

GitHub code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production. Before you can configure code scanning for a repository, you must enable code scanning by adding a GitHub Actions workflow to the repository. For more information, see Setting up code scanning for a repository.