microsoft / security-devops-action

Microsoft Security DevOps for GitHub Actions.
MIT License
104 stars 47 forks source link

Expected workflow usage scenario #22

Open markphip opened 2 years ago

markphip commented 2 years ago

How is this intended to work in the context of overall workflows? Is it a step that should be added to an existing workflow that has built the binaries and run tests or should it be in its own workflow file?

I was heading down the path of the latter but then I noticed BinSkim step fails because it cannot find the binaries. So I assume the intend would be to add this to an existing workflow process that has built the binaries.