Skip to content

Add GitHub workflow for osv-scanner + Makefile adjustments" #1

Add GitHub workflow for osv-scanner + Makefile adjustments"

Add GitHub workflow for osv-scanner + Makefile adjustments" #1

Workflow file for this run

name: OSV-Scanner
# Change "main" to your default branch if you use a different name, i.e. "master"
on:
pull_request:
branches: [main]
merge_group:
branches: [main]
schedule:
- cron: "0 8 * * 1" # Every Monday on 08:00
push:
branches: [main]
permissions:
# Required to upload SARIF file to CodeQL. See: https://github.com/github/codeql-action/issues/2117
actions: read
# Require writing security events to upload SARIF file to security tab
security-events: write
# Only need to read contents
contents: read
jobs:
scan-scheduled:
if: ${{ github.event_name == 'push' || github.event_name == 'schedule' }}
uses: "google/osv-scanner-action/.github/workflows/[email protected]"
with:
# Example of specifying custom arguments
scan-args: |-
-r
--skip-git
./
scan-pr:
if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
uses: "google/osv-scanner-action/.github/workflows/[email protected]"

Check failure on line 34 in .github/workflows/osv-scanner.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/osv-scanner.yml

Invalid workflow file

error parsing called workflow ".github/workflows/osv-scanner.yml" -> "google/osv-scanner-action/.github/workflows/[email protected]" : failed to fetch workflow: reference to workflow should be either a valid branch, tag, or commit
with:
# Example of specifying custom arguments
scan-args: |-
-r
--skip-git
./