Skip to content

Commit 5accb0b

Browse files
authored
docs: update the sast example (#25)
Use the `analyze_code_diff` job to reflect changes made to static code analysis.
1 parent 94603e5 commit 5accb0b

File tree

1 file changed

+6
-8
lines changed

1 file changed

+6
-8
lines changed

src/examples/sast.yml

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,8 @@
11
description: |
2-
The "analyze_code" job runs a static analysis tool to scan the codebase for vulnerabilities.
3-
By default, a diff-aware scanning is performed meaning only file changes in the last commit
4-
are scanned, or files scoped to the pull request if a short-lived branch is in question.
5-
There is an option to scan all files inside a repository, change a base branch,
6-
and enforce a different set of scan rules.
2+
The "analyze_code_diff" job runs a static analysis tool to scan the codebase for vulnerabilities.
3+
A diff-aware scanning is performed meaning only file changes in the last commit are scanned,
4+
or files scoped to the pull request if a short-lived branch is in question.
5+
There is an option to change a base branch and enforce a different set of scan rules.
76
87
usage:
98
version: 2.1
@@ -12,7 +11,6 @@ usage:
1211
workflows:
1312
test_codebase:
1413
jobs:
15-
- security/analyze_code:
16-
path: ~/workspace
17-
full_scan: true
14+
- security/analyze_code_diff:
15+
rules: p/comment p/secure-defaults
1816
base_branch: prod

0 commit comments

Comments
 (0)