Create sastt.yaml

.github/sastt.yaml

@@ -0,0 +1,28 @@
+name: Flawfinder Analysis
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  flawfinder-analysis:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    - name: Set up Python 3.x
+      uses: actions/setup-python@v2
+      with:
+        python-version: '3.x'
+    - name: Install Flawfinder
+      run: pip install flawfinder
+    - name: Run Flawfinder
+      run: flawfinder --html --context /tmp/ > flawfinder-report.html
+    - name: Upload Flawfinder Report
+      uses: actions/upload-artifact@v2
+      with:
+        name: flawfinder-report
+        path: flawfinder-report.html