diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index e003503..5700def 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -50,3 +50,24 @@ jobs: run: python -m pip install gitlint - name: Run gitlint check run: gitlint --commits origin/${{ github.event.pull_request.base.ref }}..HEAD + checkton: + runs-on: ubuntu-latest + steps: + - name: Checkout Repository + # Differential Checkton requires full git history + uses: actions/checkout@v4 + with: + fetch-depth: 0 + - name: Run Checkton + id: checkton + uses: chmeliik/checkton@v0.1.2 # Migrating to the konflux-ci org + with: + # Let there be green. GitHub's code scanning will do the reporting. + fail-on-findings: false + find-copies-harder: true + - name: Upload SARIF File + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: ${{ steps.checkton.outputs.sarif }} + # Avoid clashing with ShellCheck + category: checkton