SAPP Action
ActionsTags
(2)
SAPP Github Action allows you run SAPP (Static Analysis Post Processor) in CI to post process static analysis results from tools like Pysa and Mariana Trench.
SAPP Action will upload the results after applying filters in SARIF to GitHub, where you can view them in the Security tab of your repo.
# .github/workflows/test.yml
- name: Saving static analysis results for SAPP
uses: actions/upload-artifact@v2
with:
name: static-analysis-results
path: ./path/to/static-analysis-output
if-no-files-found: error
- name: Postprocess static analysis results
uses: facebook/sapp-action@main
with:
version: latest # version of fb-sapp on PyPi you want to use
artifact-handle: static-analysis-results
filters-directory: /path/to/sapp/filtersSAPP Action is licensed under the MIT license.
SAPP Action is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.
Tags
(2)SAPP Action is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.