diff --git a/.github/workflows/zarn.yml b/.github/workflows/zarn.yml index f552764..31e79c8 100644 --- a/.github/workflows/zarn.yml +++ b/.github/workflows/zarn.yml @@ -1,4 +1,4 @@ -name: ZARN +name: ZARN SAST on: push: @@ -7,21 +7,10 @@ on: branches: [ "main" ] schedule: - cron: '28 23 * * 1' - + jobs: - build: - runs-on: ubuntu-latest - + zarn: + name: Security Static Analaysis with ZARN + runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v4 - - name: Install dependencies - run: | - git clone https://github.com/htrgouvea/zarn - sudo apt install -y perl cpanminus - cd zarn && sudo cpanm --installdeps . - - name: Hunt for findings - run: | - cd zarn && perl zarn.pl --source ../ --sarif ../zarn.sarif - - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: zarn.sarif \ No newline at end of file + - uses: htrgouvea/zarn@0.1.0 \ No newline at end of file