Skip to content

rl-scanner-only

rl-scanner-only #2

Workflow file for this run

name: RL-Secure Workflow
run-name: rl-scanner-only
on:
merge_group:
workflow_dispatch:
push:
branches: ['main']
pull_request:
types:
- opened
- synchronize
jobs:
checkout-build-scan-only:
runs-on: ubuntu-latest
permissions:
statuses: write
pull-requests: write
security-events: write
actions: read
contents: read
steps:
- uses: actions/checkout@v4
- name: Install npm dependencies
run: npm install
- name: Create tgz build artifact
run: |
tar -czvf auth0-react.tgz *
- name: Create build artifact
id: output_build_artifact
run: |
echo "scanfile=auth0-react.tgz" >> $GITHUB_OUTPUT
- name: Scan packages with rl-secure
id: scan
env:
RLSECURE_ENCODED_LICENSE: ${{ secrets.RLSECURE_ENCODED_LICENSE }}
RLSECURE_SITE_KEY: ${{ secrets.RLSECURE_SITE_KEY }}
uses: reversinglabs/gh-action-rl-scanner-composite@v1
with:
artifact-to-scan: ${{ steps.output_build_artifact.outputs.scanfile }}
- name: Get the scan status output
if: success() || failure()
run: |
echo "The status is: '${{ steps.scan.outputs.status }}'"
echo "The description is: '${{ steps.scan.outputs.description }}'"