summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorAlbin <albin@mullvad.net>2023-11-22 11:13:32 +0100
committerAlbin <albin@mullvad.net>2023-11-22 11:29:58 +0100
commit789201d7645500dbe5641274b1a72b2ae2ca0b0c (patch)
treeabb71ceeabbb324a10bb9d31e7a360279fd6553e
parent285cf6fbfbfeadbfba01f3735edcd7710e713b9d (diff)
downloadmullvadvpn-789201d7645500dbe5641274b1a72b2ae2ca0b0c.tar.xz
mullvadvpn-789201d7645500dbe5641274b1a72b2ae2ca0b0c.zip
Add GH action for static analysis tool mobsfscan
The action will currently not fail on warnings. That can be configured after we've went through the warnings and fixed or suppressed them.
-rw-r--r--.github/workflows/android-static-analysis.yml27
1 files changed, 27 insertions, 0 deletions
diff --git a/.github/workflows/android-static-analysis.yml b/.github/workflows/android-static-analysis.yml
new file mode 100644
index 0000000000..e34fa248fb
--- /dev/null
+++ b/.github/workflows/android-static-analysis.yml
@@ -0,0 +1,27 @@
+---
+name: Android - Static analysis
+on:
+ workflow_dispatch:
+ pull_request:
+ paths:
+ - .github/workflows/android-static-analysis.yml
+ - android/**
+ schedule:
+ # At 06:20 UTC every day.
+ # Notifications for scheduled workflows are sent to the user who last modified the cron
+ # syntax in the workflow file. If you update this you must have notifications for
+ # Github Actions enabled, so these don't go unnoticed.
+ # https://docs.github.com/en/actions/monitoring-and-troubleshooting-workflows/notifications-for-workflow-runs
+ - cron: '20 6 * * *'
+jobs:
+ mobsfscan:
+ name: Code scanning using mobsfscan
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v3
+
+ - name: Scan code
+ uses: MobSF/mobsfscan@main
+ with:
+ args: '--type android android'