diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml index 3c9daeb..3f9a4fd 100644 --- a/.github/workflows/static-analysis.yml +++ b/.github/workflows/static-analysis.yml @@ -33,24 +33,24 @@ jobs: name: "Static Analysis with Psalm" runs-on: "ubuntu-22.04" - steps: - - name: Checkout code - uses: actions/checkout@v4 - - - name: "Install PHP" - uses: "shivammathur/setup-php@v2" - with: - coverage: "none" - php-version: "${{ matrix.php-version }}" - tools: "cs2pr" - - - name: "Install dependencies with Composer" - uses: "ramsey/composer-install@v1" - - - name: "Run a static analysis with vimeo/psalm" - run: "vendor/bin/psalm --output-format=github --shepherd --taint-analysis --report=results.sarif" - - - name: Upload Security Analysis results to GitHub - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: results.sarif + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: "Install PHP" + uses: "shivammathur/setup-php@v2" + with: + coverage: "none" + php-version: "${{ matrix.php-version }}" + tools: "cs2pr" + + - name: "Install dependencies with Composer" + uses: "ramsey/composer-install@v1" + + - name: "Run a static analysis with vimeo/psalm" + run: "vendor/bin/psalm --output-format=github --shepherd --taint-analysis --report=results.sarif" + + - name: Upload Security Analysis results to GitHub + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: results.sarif