File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1- name : " codeql-extractor-iac"
2- description : " CodeQL Extractor for Infrastructure as Code"
1+ name : " CodeQL IaC Extractor"
2+ description : " CodeQL IaC Extractor GitHub Action"
3+ author : " GitHub Security Lab"
4+ branding :
5+ color : " blue"
6+ icon : " lock"
37
48inputs :
59 token :
6- description : GitHub Token
10+ description : >
11+ The GitHub token used to make authenticated API requests.
712 default : ${{ github.token }}
13+ required : false
814
9- source-root :
10- description : " Path of the root source code directory, relative to $GITHUB_WORKSPACE."
11- default : " ./"
12-
13- extractor-version :
14- description : " Pin to a version of the IaC Extractor to use (release tag)."
15-
16- sarif :
17- description : " SARIF File Output"
18- default : " codeql-iac.sarif"
15+ outputs :
16+ sarif-results :
17+ description : >
18+ The path to the SARIF results file generated by the extractor.
19+ value : ${{ steps.extractor.outputs.sarif_results }}
1920
2021runs :
21- using : " node16"
22- main : " .github/action/dist/index.js"
22+ using : " composite"
23+ steps :
24+ - name : " CodeQL Extractor Action"
25+ uses : advanced-security/codeql-extractor-action@v0.1.0
26+ id : extractor
27+ with :
28+ token : ${{ inputs.token }}
29+ extractors : " advanced-security/codeql-extractor-iac@v0.4.1,githubsecuritylab/codeql-extractor-bicep@v0.2.3"
30+ packs : advanced-security/iac-queries,githubsecuritylab/bicep-queries
31+ languages : " iac,bicep"
You can’t perform that action at this time.
0 commit comments