njsscan-action

KO | EN

gitlite — search

#android #docker #javascript #html #csharp #jquery #ruby #angular2 #api #typescript #engineering #c

★ 28 Open GitHub ↗

nodejsscan Github Action

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# njsscan action
njsscan finds insecure code patterns in your node.js applications.

## Example Usage

Add the following file .github/workflows/njsscan.yml to your node.js repositories in Github to enable njsscan in your CI/CD or DevSecOps pipeline.

```yaml
name: njsscan
on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]
jobs:
  njsscan:
    runs-on: ubuntu-latest
    name: njsscan check
    steps:
    - name: Checkout the code
      uses: actions/checkout@v4.2.2
    - uses: actions/setup-python@v5.3.0
      with:
        python-version: '3.12'
    - name: nodejsscan scan
      id: njsscan
      uses: ajinabraham/njsscan-action@master
      with:
        args: '.'
```

### Github Code Scanning SARIF upload

```yaml
name: njsscan
on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]
jobs:
  njsscan:
    runs-on: ubuntu-latest
    name: njsscan code scanning
    steps:
    - name: Checkout the code
      uses: actions/checkout@v4.2.2
    - uses: actions/setup-python@v5.3.0
      with:
        python-version: '3.12'
    - name: nodejsscan scan
      id: njsscan
      uses: ajinabraham/njsscan-action@master
      with:
        args: '. --sarif --output results.sarif || true'
    - name: Upload njsscan report
      uses: github/codeql-action/upload-sarif@v3
      with:
        sarif_file: results.sarif
```
For configuration, see: https://github.com/ajinabraham/njsscan#configure-njsscan

njsscan-action

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README