-
Couldn't load subscription status.
- Fork 86
Description
Can we get some better installation instructions?
I'm struggling to understand what exactly I need to do in order to use this action.
Step 1 states "Create a repository to host this GitHub Action or select an existing repository."
Do I fork this repo? Clone it then upload to me own account? Or if I select a pre-existing repo, is it the one I want to be scanned?
Step 2 "Create the env values from the sample workflow below (GH_TOKEN, SEARCH_QUERY) with your information as repository secrets. More info on creating secrets can be found here. Note: Your GitHub token will need to have read access to the repository in the organization that you want evaluated"
Where do I put these env vars? I see an .env-example file, so I guess I need an .env file, but where would it go? In the repo I want scanning, or in some other repo (see issues with step 1)