kics.yml

---
name: KICS Security Scan
on:
  workflow_dispatch:
    inputs:
      logLevel:
        description: 'Log level'
        required: true
        default: 'warning'
        type: choice
        options:
          - info
          - warning
          - debug
  pull_request:
  merge_group:
jobs:
  kics:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2
      - name: Mkdir results-dir
        # make sure results dir is created
        run: mkdir -p results-dir
      - name: run kics Scan
        uses: Checkmarx/kics-github-action@v2.1.3
        with:
          # path: 'roles,plugins'
          path: '.'
          # fail_on: high
          ignore_on_exit: results
          output_formats: 'json,sarif'
          output_path: results-dir
      - name: Upload SARIF file
        uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: results-dir/results.sarif