diff --git a/.github/workflows/shiftleft-analysis.yml b/.github/workflows/shiftleft-analysis.yml deleted file mode 100644 index 2dcbabe3..00000000 --- a/.github/workflows/shiftleft-analysis.yml +++ /dev/null @@ -1,54 +0,0 @@ -name: SL Scan - -on: - pull_request: - -jobs: - Scan-Build: - # Scan runs on ubuntu, mac and windows - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@v2.3.3 - - - name: Setup Node.js - uses: actions/setup-node@v2.1.1 - with: - node-version: 14 - - - name: Cache Node.js modules - id: cache - uses: actions/cache@v2.1.1 - with: - path: ~/.npm - key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }} - restore-keys: | - ${{ runner.os }}-node- - - - name: Cache hit - run: echo ${{ steps.cache.outputs.cache-hit }} - - - name: Install dependencies - run: npm ci - env: - SKIP_BUILD: true - - - name: Build - run: npm run build - - - name: Perform Scan - uses: ShiftLeftSecurity/scan-action@v1.3.0 - env: - WORKSPACE: "" - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - SCAN_AUTO_BUILD: true - with: - output: reports - # Scan auto-detects the languages in your project. To override uncomment the below variable and set the type - # type: credscan,java - # type: python - - - name: Upload report - uses: github/codeql-action/upload-sarif@v1 - with: - sarif_file: reports