@@ -156,26 +156,26 @@ jobs:
156156 - name : Run Debian package tests
157157 run : make debian-test-ci
158158
159- checkcov :
160- permissions :
161- security-events : write # for github/codeql-action/upload-sarif to upload SARIF results
162- actions : read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
163- runs-on : ubuntu-latest
164- steps :
165- - uses : actions/checkout@v4
166- - name : Checkov GitHub Action
167- uses : bridgecrewio/checkov-action@v12
168- with :
169- # This will add both a CLI output to the console and create a results.sarif file
170- output_format : cli,sarif
171- output_file_path : console,results.sarif
172- - name : Upload SARIF file
173- uses : github/codeql-action/upload-sarif@v3
174- # Results are generated only on a success or failure
175- # this is required since GitHub by default won't run the next step
176- # when the previous one has failed. Security checks that do not pass will 'fail'.
177- # An alternative is to add `continue-on-error: true` to the previous step
178- # Or 'soft_fail: true' to checkov.
179- if : success() || failure()
180- with :
181- sarif_file : results.sarif
159+ # checkcov:
160+ # permissions:
161+ # security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
162+ # actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
163+ # runs-on: ubuntu-latest
164+ # steps:
165+ # - uses: actions/checkout@v4
166+ # - name: Checkov GitHub Action
167+ # uses: bridgecrewio/checkov-action@v12
168+ # with:
169+ # # This will add both a CLI output to the console and create a results.sarif file
170+ # output_format: cli,sarif
171+ # output_file_path: console,results.sarif
172+ # - name: Upload SARIF file
173+ # uses: github/codeql-action/upload-sarif@v3
174+ # # Results are generated only on a success or failure
175+ # # this is required since GitHub by default won't run the next step
176+ # # when the previous one has failed. Security checks that do not pass will 'fail'.
177+ # # An alternative is to add `continue-on-error: true` to the previous step
178+ # # Or 'soft_fail: true' to checkov.
179+ # if: success() || failure()
180+ # with:
181+ # sarif_file: results.sarif
0 commit comments