2020 # The branches below must be a subset of the branches above
2121 branches : [ "main" ]
2222 schedule :
23- - cron : ' 17 12 * * 0 '
23+ - cron : ' 20 7 * * 2 '
2424
2525permissions :
2626 contents : read
@@ -32,25 +32,15 @@ jobs:
3232 security-events : write # for github/codeql-action/upload-sarif to upload SARIF results
3333 actions : read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
3434 name : Codacy Security Scan
35- runs-on : ubuntu-24.04
36-
35+ runs-on : ubuntu-latest
3736 steps :
3837 # Checkout the repository to the GitHub Actions runner
3938 - name : Checkout code
40- uses : actions/checkout@v3
41-
42- - name : Debug environment
43- run : |
44- echo "Current directory:"
45- pwd
46- echo "Listing files:"
47- ls -la
48- echo "Environment variables:"
49- env
39+ uses : actions/checkout@v4
5040
5141 # Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
5242 - name : Run Codacy Analysis CLI
53- uses : codacy/codacy-analysis-cli-action@v4
43+ uses : codacy/codacy-analysis-cli-action@d840f886c4bd4edc059706d09c6a1586111c540b
5444 with :
5545 # Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository
5646 # You can also omit the token and run the tools that support default configurations
6353 # Force 0 exit code to allow SARIF file generation
6454 # This will handover control about PR rejection to the GitHub side
6555 max-allowed-issues : 2147483647
66- force-zero-exit-code : true
67-
68- # Validate SARIF file using jq to format and inspect its JSON structure
69- - name : Validate SARIF file
70- run : jq '.' results.sarif
7156
7257 # Upload the SARIF file generated in the previous step
7358 - name : Upload SARIF results file
0 commit comments