PSScriptAnalyzer #182

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.
	#
	# https://github.com/microsoft/action-psscriptanalyzer
	# For more information on PSScriptAnalyzer in general, see
	# https://github.com/PowerShell/PSScriptAnalyzer

	name: PSScriptAnalyzer

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]
	schedule:
	- cron: '27 21 * * 0'

	permissions:
	contents: read

	jobs:
	build:
	permissions:
	contents: read # for actions/checkout to fetch code
	security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
	actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
	name: PSScriptAnalyzer
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0

	- name: Run PSScriptAnalyzer
	uses: microsoft/psscriptanalyzer-action@7a0da25f33985767f15f93140306528900744195
	with:
	# Check https://github.com/microsoft/action-psscriptanalyzer for more info about the options.
	# The below set up runs PSScriptAnalyzer to your entire repository and runs some basic security rules.
	path: .\
	recurse: true
	output: results.sarif

	# Upload the SARIF file generated in the previous step
	- name: Upload SARIF results file
	uses: github/codeql-action/upload-sarif@366883a76d75dcee5428da5c3ae7abf9386e35ac # v2.26.2
	with:
	sarif_file: results.sarif

Provide feedback