diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index a9dc9e6..b7ee77b 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -24,16 +24,12 @@ jobs: steps: # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it - uses: actions/checkout@v2 + run: --only-verified # Runs a single command using the runners shell - name: Run a one-line script run: echo Hello, world! - # Runs a set of commands using the runners shell - - name: Run a multi-line script - run: | - echo Add other actions to build, - echo test, and deploy your project. - name: Easy detect-secrets # You may pin to the exact commit or the version. # uses: RobertFischer/detect-secrets-action@fa2d02975bad47bd65e5752377d0ded2714c985f @@ -42,6 +38,7 @@ jobs: # You may pin to the exact commit or the version. # uses: ShiftLeftSecurity/scan-action@54980bbdae434b8e7903cfcffa98a2601c207962 uses: ShiftLeftSecurity/scan-action@v1.3.0 + if: ${{ always() }} with: # Source directory to scan. Defaults to /github/workspace src: /github/workspace