diff --git a/.flow-scanner.yml b/.flow-scanner.yml new file mode 100644 index 000000000..924293313 --- /dev/null +++ b/.flow-scanner.yml @@ -0,0 +1,20 @@ +# Disables layout and documentation related rules for Flow Scanner +rules: + missing-flow-description: + enabled: false + inactive-flow: + enabled: false + missing-fault-path: + enabled: false + invalid-naming-convention: + enabled: false + invalid-api-version: + enabled: false + unspecified-trigger-order: + enabled: false + missing-auto-layout: + enabled: false + unused-variable: + enabled: false + unreachable-element: + enabled: false \ No newline at end of file diff --git a/.github/workflows/scanFlows.yml b/.github/workflows/scanFlows.yml new file mode 100644 index 000000000..c61497860 --- /dev/null +++ b/.github/workflows/scanFlows.yml @@ -0,0 +1,31 @@ +name: Scan Flows + +on: + push: + branches: [ master ] + pull_request: + branches: [ master ] + +jobs: + scan-flows: + runs-on: ubuntu-latest + permissions: + contents: read # Read flow files + pull-requests: read # List changed files in PR + security-events: write # Upload SARIF to Code Scanning + actions: read # Required to gather metadata for telemetry + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Lightning Flow Scan + id: flowscanner + uses: Flow-Scanner/lightning-flow-scanner@action-v3.5.0 + with: + sarif-only: false + + # - name: Upload SARIF to Code Scanning + # uses: github/codeql-action/upload-sarif@v3 + # with: + # sarif_file: ${{ steps.flowscanner.outputs.sarifPath }} \ No newline at end of file