diff --git a/.github/workflows/njssscan.yml b/.github/workflows/njssscan.yml index 22bb089..b091dd6 100644 --- a/.github/workflows/njssscan.yml +++ b/.github/workflows/njssscan.yml @@ -14,4 +14,8 @@ jobs: id: njsscan uses: ajinabraham/njsscan-action@v5 with: - args: '.' \ No newline at end of file + args: '. --sarif --output results.sarif || true' + name: upload report to github code scanning + uses: github/codeql-action/upload-sarif@v1 + with: + sarif_file: results.sarif \ No newline at end of file