Create Microsoft_Defender_for_DevOps.yml

HoussemDellai · Jul 25, 2023 · 251c2ef · 251c2ef
1 parent 4a7fe1f
commit 251c2ef
Showing 1 changed file with 37 additions and 0 deletions.
diff --git a/.github/workflows/Microsoft_Defender_for_DevOps.yml b/.github/workflows/Microsoft_Defender_for_DevOps.yml
@@ -0,0 +1,37 @@
+name: Microsoft Defender for DevOps
+on:
+  push:
+    branches:
+      - dev
+  workflow_dispatch:
+
+jobs:
+  sample:
+    name: Microsoft Security DevOps Analysis
+
+    # MSDO runs on windows-latest.
+    # ubuntu-latest and macos-latest supporting coming soon
+    runs-on: windows-latest
+
+    steps:
+
+      # Checkout your code repository to scan
+    - uses: actions/checkout@v3
+
+      # Run analyzers
+    - name: Run Microsoft Security DevOps Analysis
+      uses: microsoft/security-devops-action@preview
+      id: msdo
+
+      # Upload alerts to the Security tab
+    - name: Upload alerts to Security tab
+      uses: github/codeql-action/upload-sarif@v2
+      with:
+        sarif_file: ${{ steps.msdo.outputs.sarifFile }}
+
+      # Upload alerts file as a workflow artifact
+    - name: Upload alerts file as a workflow artifact
+      uses: actions/upload-artifact@v3
+      with:  
+        name: alerts
+        path: ${{ steps.msdo.outputs.sarifFile }}