Skip to content

Commit aa5d7c3

Browse files
committed
create seperate lfs workflow file
1 parent 3200652 commit aa5d7c3

File tree

2 files changed

+31
-12
lines changed

2 files changed

+31
-12
lines changed

.github/workflows/scanAndTest.yml

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -154,18 +154,6 @@ jobs:
154154
- name: 'Authenticate to Integration Org'
155155
run: sfdx auth:sfdxurl:store -f ./SFDX_INTEGRATION_URL.txt -s -a integration
156156

157-
# Run Lightning Flow Scanner
158-
- name: Run Flow Scanner
159-
id: scanner
160-
uses: Flow-Scanner/[email protected]
161-
with:
162-
outputMode: sarif # optional (default)
163-
164-
- name: Upload SARIF to Code Scanning
165-
uses: github/codeql-action/upload-sarif@v3
166-
with:
167-
sarif_file: ${{ steps.scanner.outputs.sarifPath }}
168-
169157
# We use SFDX Git Delta to create a directory with only the metadata that has changed.
170158
# this allows us to deploy only those changes, as opposed to deploying the entire branch.
171159
# This helps reducing deployment times

.github/workflows/scanFlows.yml

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
name: Scan Flows
2+
3+
on:
4+
push:
5+
branches: [ master ]
6+
pull_request:
7+
branches: [ master ]
8+
9+
jobs:
10+
scan-flows:
11+
runs-on: ubuntu-latest
12+
permissions:
13+
contents: read # Read flow files
14+
pull-requests: read # List changed files in PR
15+
security-events: write # Upload SARIF to Code Scanning
16+
actions: read # Required to gather metadata for telemetry
17+
18+
steps:
19+
- name: Checkout repository
20+
uses: actions/checkout@v4
21+
22+
- name: Lightning Flow Scan
23+
id: flowscanner
24+
uses: Flow-Scanner/[email protected]
25+
with:
26+
sarif-only: true
27+
28+
- name: Upload SARIF to Code Scanning
29+
uses: github/codeql-action/upload-sarif@v3
30+
with:
31+
sarif_file: ${{ steps.flowscanner.outputs.sarifPath }}

0 commit comments

Comments
 (0)