Add Semgrep CI #44
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy ASP.NET Core app to Azure Web App | |
| on: | |
| push: | |
| branches: | |
| - master | |
| pull_request: | |
| branches: | |
| - '*' | |
| # CONFIGURATION EDIT | |
| # For help, go to https://github.com/Azure/Actions | |
| # | |
| # 1. Set up the following secrets in your repository: | |
| # AZURE_WEBAPP_PUBLISH_PROFILE | |
| # | |
| # 2. Change these variables for your configuration: | |
| env: | |
| AZURE_WEBAPP_NAME: TanyaWebApp # set this to your application's name | |
| AZURE_WEBAPP_PACKAGE_PATH: '.' # set this to the path to your web app project, defaults to the repository root | |
| DOTNET_VERSION: '3.0.100' # set this to the dot net version to use | |
| jobs: | |
| build-and-deploy: | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Checkout the repo | |
| - uses: actions/checkout@master | |
| # Setup .NET Core SDK | |
| - name: Setup .NET Core | |
| uses: actions/setup-dotnet@v1 | |
| with: | |
| dotnet-version: ${{ env.DOTNET_VERSION }} | |
| # Run dotnet build and publish | |
| - name: dotnet build and publish | |
| run: | | |
| dotnet build --configuration Release | |
| dotnet publish -c Release -o '${{ env.AZURE_WEBAPP_PACKAGE_PATH }}/myapp' | |
| #- uses: actions/checkout@master | |
| - name: trufflehog-actions-scan | |
| uses: edplato/trufflehog-actions-scan@master | |
| with: | |
| scanArguments: "--regex --entropy=False --max_depth=5 --rules /regexes.json" # Add custom options here* | |
| #SCA | |
| #- name: Snyk | |
| # uses: snyk/actions/dotnet@master | |
| # env: | |
| # SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| # Deploy to Azure Web apps | |
| - name: 'Run Azure webapp deploy action using publish profile credentials' | |
| uses: azure/webapps-deploy@v2 | |
| with: | |
| app-name: ${{ env.AZURE_WEBAPP_NAME }} # Replace with your app name | |
| publish-profile: ${{ secrets.publish_profile }} # Define secret variable in repository settings as per action documentation | |
| package: '${{ env.AZURE_WEBAPP_PACKAGE_PATH }}/myapp' | |
| # For more samples to get started with GitHub Action workflows to deploy to Azure, refer to https://github.com/Azure/actions-workflow-samples |