Skip to content

Add PSScriptAnalyzer workflow for PowerShell scripts#7

Merged
SamErde merged 2 commits into
mainfrom
SamErde-patch-1
May 6, 2026
Merged

Add PSScriptAnalyzer workflow for PowerShell scripts#7
SamErde merged 2 commits into
mainfrom
SamErde-patch-1

Conversation

@SamErde
Copy link
Copy Markdown
Owner

@SamErde SamErde commented May 6, 2026

This workflow runs PSScriptAnalyzer on the repository to check PowerShell scripts for best practices and security issues.

This workflow runs PSScriptAnalyzer on the repository to check PowerShell scripts for best practices and security issues.
Copilot AI review requested due to automatic review settings May 6, 2026 08:59
@codacy-production
Copy link
Copy Markdown

codacy-production Bot commented May 6, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a GitHub Actions workflow to run PSScriptAnalyzer on repository PowerShell scripts and upload results as SARIF to GitHub code scanning.

Changes:

  • Introduces a new PSScriptAnalyzer workflow triggered on push, pull_request, and a weekly schedule.
  • Runs microsoft/psscriptanalyzer-action with a limited set of rules and emits results.sarif.
  • Uploads the SARIF report via github/codeql-action/upload-sarif for code scanning integration.

Comment thread .github/workflows/powershell.yml
Skip CodeQL SARIF upload on pull_request runs from forks so PSScriptAnalyzer still provides a usable CI signal without failing on unavailable security-events permissions.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-advanced-security
Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@SamErde SamErde merged commit c7803c9 into main May 6, 2026
6 checks passed
@SamErde SamErde deleted the SamErde-patch-1 branch May 6, 2026 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants