File tree Expand file tree Collapse file tree 1 file changed +6
-8
lines changed Expand file tree Collapse file tree 1 file changed +6
-8
lines changed Original file line number Diff line number Diff line change 11description : |
2- The "analyze_code" job runs a static analysis tool to scan the codebase for vulnerabilities.
3- By default, a diff-aware scanning is performed meaning only file changes in the last commit
4- are scanned, or files scoped to the pull request if a short-lived branch is in question.
5- There is an option to scan all files inside a repository, change a base branch,
6- and enforce a different set of scan rules.
2+ The "analyze_code_diff" job runs a static analysis tool to scan the codebase for vulnerabilities.
3+ A diff-aware scanning is performed meaning only file changes in the last commit are scanned,
4+ or files scoped to the pull request if a short-lived branch is in question.
5+ There is an option to change a base branch and enforce a different set of scan rules.
76
87usage :
98 version : 2.1
1211 workflows :
1312 test_codebase :
1413 jobs :
15- - security/analyze_code :
16- path : ~/workspace
17- full_scan : true
14+ - security/analyze_code_diff :
15+ rules : p/comment p/secure-defaults
1816 base_branch : prod
You can’t perform that action at this time.
0 commit comments