Skip to content

Commit b95585a

Browse files
committed
2 parents a527135 + 616d951 commit b95585a

1 file changed

Lines changed: 43 additions & 0 deletions

File tree

.github/workflows/main.yml

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
name: MobScan Security Check
2+
3+
on:
4+
push:
5+
branches: [main, master]
6+
pull_request:
7+
8+
jobs:
9+
security-scan:
10+
runs-on: ubuntu-latest
11+
12+
permissions:
13+
contents: read
14+
security-events: write
15+
16+
steps:
17+
- name: Checkout code
18+
uses: actions/checkout@v4
19+
20+
- name: Set up Python
21+
uses: actions/setup-python@v4
22+
with:
23+
python-version: '3.9'
24+
25+
- name: Install MobScan
26+
run: |
27+
pip install semgrep
28+
pip install git+https://github.com/YOUR_USERNAME/MobScan.git
29+
30+
- name: Run MobScan
31+
run: |
32+
mobscan scan . --format sarif --output mobscan.sarif
33+
continue-on-error: true
34+
35+
- name: Upload SARIF to GitHub Security
36+
uses: github/codeql-action/upload-sarif@v3
37+
if: always()
38+
with:
39+
sarif_file: mobscan.sarif
40+
41+
- name: Fail on high severity issues
42+
run: |
43+
mobscan scan . --fail-on high

0 commit comments

Comments
 (0)