Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add datadog static analyzer #2741

Merged
merged 4 commits into from
Jul 3, 2024
Merged

Add datadog static analyzer #2741

merged 4 commits into from
Jul 3, 2024

Conversation

juli1
Copy link
Contributor

@juli1 juli1 commented Jun 12, 2024

What does this PR do?

This PR adds supports for Datadog static analysis. It only checks rules that validates the GitHub actions are safe and secure.

Motivation

We want to ensure our GitHub actions are safe and secure.

Related

PR in datadog-agent

@juli1 juli1 requested a review from a team as a code owner June 12, 2024 15:45
@datadog-datadog-prod-us1
Copy link

datadog-datadog-prod-us1 bot commented Jun 12, 2024

Software Composition Analysis

We found vulnerabilities in the following libraries (compared 6f1a836 against 79237af):

@pr-commenter
Copy link

pr-commenter bot commented Jun 12, 2024

Benchmarks

Benchmark execution time: 2024-07-03 11:02:48

Comparing candidate commit b5c0640 in PR branch juli1/add-static-analyzer with baseline commit a7e2f3c in branch main.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 46 metrics, 1 unstable metrics.

@darccio
Copy link
Contributor

darccio commented Jul 3, 2024

@juli1 I set up an API key and application key for this integration: STATIC_ANALYZER_API_KEY and STATIC_ANALYZER_APP_KEY.

Please, can you update the PR? Thanks!

@juli1
Copy link
Contributor Author

juli1 commented Jul 3, 2024

@darccio thank you so much! All done!

@juli1 juli1 requested a review from darccio July 3, 2024 10:31
@datadog-datadog-prod-us1
Copy link

datadog-datadog-prod-us1 bot commented Jul 3, 2024

Software Composition Analysis

We found vulnerabilities in the following libraries (compared b5c0640 against a7e2f3c):

@darccio darccio enabled auto-merge (squash) July 3, 2024 10:42
@darccio darccio merged commit 0abcdaf into main Jul 3, 2024
164 checks passed
@darccio darccio deleted the juli1/add-static-analyzer branch July 3, 2024 12:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants