/kics-github-action-demo

A demo repo to show KICS Github Action in Action

Primary LanguageGoApache License 2.0Apache-2.0

🤖 KICS GitHub Actions Demo

This repository shows how KICS GitHub Action can be set and was fully inspired by the documentation on KICS GitHub Actions Marketplace tutorial.

  • To check how the action was set, go to .github/workflows/kics-scan=action.yml file.

    • You will see simple example of how to use KICS features in your GitHub Actions Pipeline.
  • To check results examples, go to Actions tab and select a workflow that is finished.

    • You will see multiples failures! This is intended to generate outputs so you can check how KICS create Annotations and upload reports as Artifacts to be downloaded.
  • Finally, go to the Security tab on Code scanning alerts section and see how KICS uses sarif reports to generate scanning issues.