Skip to content

Latest commit

 

History

History
42 lines (31 loc) · 1.29 KB

README.md

File metadata and controls

42 lines (31 loc) · 1.29 KB

action-sast-scan

This GitHub Action is designed for scanning Skills Network repositories using Contrast SAST. It automates the process and uploads the scan results to the Contrast portal.

Updating the action

  1. Create a new branch

    git checkout -b releases/v1
  2. Replace the contents of src/ with your action code

  3. Add tests to __tests__/ for your source code if nessary

  4. Format, test, and build the action

    npm run all

    This step is important! It will run ncc to build the final JavaScript action code with all dependencies included. If you do not run this step, your action will not work correctly when it is used in a workflow. This step also includes the --license option for ncc, which will create a license file for all of the production node modules used in your project.

  5. Commit your changes

    git add .
    git commit -m "Fix: Update action code"
  6. Push them to your repository

    git push -u origin <branch_name>
  7. Get approval from a fulltimer and merge the PR into the main branch

See more info regarding updating the action on the TypeScript action template repo