cloud_code_scan.yml (#1373)

sofastack · Nov 3, 2023 · 541c160 · 541c160
1 parent d9c2fac
commit 541c160
Showing 1 changed file with 12 additions and 5 deletions.
diff --git a/.github/workflows/cloud_code_scan.yml b/.github/workflows/cloud_code_scan.yml
@@ -1,15 +1,22 @@
 name: Alipay Cloud Devops Codescan
 on:
-  push:
-    branches-ignore:
-      - 'dependabot/**'
-
+  pull_request_target:
 jobs:
-  deployment:
+  stc:   # 安全扫描
     runs-on: ubuntu-latest
     steps:
       - name: codeScan
         uses: layotto/alipay-cloud-devops-codescan@main
         with:
           parent_uid: ${{ secrets.ALI_PID }}
           private_key: ${{ secrets.ALI_PK }}
+          scan_type: stc
+  sca:   # 开源合规
+    runs-on: ubuntu-latest
+    steps:
+      - name: codeScan
+        uses: layotto/alipay-cloud-devops-codescan@main
+        with:
+          parent_uid: ${{ secrets.ALI_PID }}
+          private_key: ${{ secrets.ALI_PK }}
+          scan_type: sca