issue-test.yaml

# A workflow that tests this action

name: SARIF issue workflow

on:
  pull_request:
    branches: [main]
  workflow_dispatch:

permissions:
  issues: write

jobs:
  issue:
    runs-on: ubuntu-latest
    name: Run the SARIF issue updater

    steps:

      - name: Harden Runner
        uses: step-security/harden-runner@41d3351872a2104cca2e1c0c05eae533d14f3967
        with:
          egress-policy: block
          disable-telemetry: true
          allowed-endpoints: >
            api.github.com:443
            github.com:443
            registry.npmjs.org:443

      - name: Checkout
        uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2

      - name: Post SARIF findings in the issue
        uses: sett-and-hive/sarif-to-issue-action@main # Not pinned, this is a test
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          repository: ${{ github.repository }}
          branch: ${{ github.head_ref }}
          sarif-file: ./test/fixtures/odc.sarif
          title: "Build artifact: issue-test.yml workflow"
          labels: "build,expected"
          dry-run: false
          odc-sarif: true