Skip to content
database

GitHub Action

SAPP Action

0.0.1 Latest version

SAPP Action

database

SAPP Action

Post process static analysis results

Installation

Copy and paste the following snippet into your .yml file.

 
              
- name: SAPP Action

              
  uses: facebookarchive/sapp-action@0.0.1
Learn more about this action in facebookarchive/sapp-action

Choose a version

SAPP Github Action

test License: MIT

SAPP Github Action allows you run SAPP (Static Analysis Post Processor) in CI to post process static analysis results from tools like Pysa and Mariana Trench.

SAPP Action will upload the results after applying filters in SARIF to GitHub, where you can view them in the Security tab of your repo.

Usage

# .github/workflows/test.yml

- name: Saving static analysis results for SAPP
    uses: actions/upload-artifact@v2
    with:
        name: static-analysis-results
        path: ./path/to/static-analysis-output
        if-no-files-found: error

- name: Postprocess static analysis results
  uses: facebook/sapp-action@main
  with:
    version: latest # version of fb-sapp on PyPi you want to use
    artifact-handle: static-analysis-results
    filters-directory: /path/to/sapp/filters

License

SAPP Action is licensed under the MIT license.