diff --git a/.github/workflows/GH-DFD.yml b/.github/workflows/GH-DFD.yml new file mode 100644 index 0000000..d2b1876 --- /dev/null +++ b/.github/workflows/GH-DFD.yml @@ -0,0 +1,36 @@ +name: MSDO windows-latest +on: + push: + branches: + - main + +jobs: + sample: + name: Microsoft Security DevOps Analysis + + # MSDO runs on windows-latest. + # ubuntu-latest and macos-latest supporting coming soon + runs-on: windows-latest + + steps: + + # Checkout your code repository to scan + - uses: actions/checkout@v3 + + # Run analyzers + - name: Run Microsoft Security DevOps Analysis + uses: microsoft/security-devops-action@preview + id: msdo + + # Upload alerts to the Security tab + - name: Upload alerts to Security tab + uses: github/codeql-action/upload-sarif@v2 + with: + sarif_file: ${{ steps.msdo.outputs.sarifFile }} + + # Upload alerts file as a workflow artifact + - name: Upload alerts file as a workflow artifact + uses: actions/upload-artifact@v3 + with: + name: alerts + path: ${{ steps.msdo.outputs.sarifFile }} diff --git a/README.md b/README.md index 63a9886..a71af3b 100644 --- a/README.md +++ b/README.md @@ -27,7 +27,9 @@ The fastest way for you to get this application up and running on Azure is to us 1. Run the following command to initialize the project, provision Azure resources, and deploy the application code. ```bash -azd up --template api-management-sample-apis +1. azd init --template api-management-sample-apis +2. azd auth login +3. azd up template api-management-sample-apis ``` You will be prompted for the following information: