From eb38a1ce794dc236937af8ac012e35512e1c2c0c Mon Sep 17 00:00:00 2001 From: Emmanuel Obua <45915845+EmmanuelObua@users.noreply.github.com> Date: Sun, 30 Jan 2022 17:29:36 +0300 Subject: [PATCH 1/2] Setup code analysis on this repo --- .github/workflows/codescan-analysis.yml | 42 +++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 .github/workflows/codescan-analysis.yml diff --git a/.github/workflows/codescan-analysis.yml b/.github/workflows/codescan-analysis.yml new file mode 100644 index 00000000..6db08d99 --- /dev/null +++ b/.github/workflows/codescan-analysis.yml @@ -0,0 +1,42 @@ +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. + +# This workflow requires that you have an existing account with codescan.io +# For more information about configuring your workflow, +# read our documentation at https://github.com/codescan-io/codescan-scanner-action +name: CodeScan + +on: + push: + branches: [ main ] + pull_request: + # The branches below must be a subset of the branches above + branches: [ main ] + schedule: + - cron: '24 12 * * 1' + +jobs: + CodeScan: + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v2 + - name: Cache files + uses: actions/cache@v2 + with: + path: | + ~/.sonar + key: ${{ runner.os }}-sonar + restore-keys: ${{ runner.os }}-sonar + - name: Run Analysis + uses: codescan-io/codescan-scanner-action@5b2e8c5683ef6a5adc8fa3b7950bb07debccce12 + with: + login: ${{ secrets.CODESCAN_AUTH_TOKEN }} + organization: ${{ secrets.CODESCAN_ORGANIZATION_KEY }} + projectKey: ${{ secrets.CODESCAN_PROJECT_KEY }} + - name: Upload SARIF file + uses: github/codeql-action/upload-sarif@v1 + with: + sarif_file: codescan.sarif From 08104a7cea9841e4d684390e274fbd99b81faa82 Mon Sep 17 00:00:00 2001 From: Emmanuel Obua <45915845+EmmanuelObua@users.noreply.github.com> Date: Sun, 30 Jan 2022 17:51:17 +0300 Subject: [PATCH 2/2] updated idex --- index.js | 1 + 1 file changed, 1 insertion(+) diff --git a/index.js b/index.js index 2e1ae6d0..8f78878c 100644 --- a/index.js +++ b/index.js @@ -321,6 +321,7 @@ exports.extract = function (cwd, opts) { }) if (opts.finish) extract.on('finish', opts.finish) + return extract }