Skip to content

Reduce false positives of ShouldHaveUsedTimestampValidator #68

Reduce false positives of ShouldHaveUsedTimestampValidator

Reduce false positives of ShouldHaveUsedTimestampValidator #68

# Runs CodeGuru Reviewer on push events,
# and uploads recommendations to the GitHub Security tab.
# For information on the setup see:
# https://github.com/aws-samples/aws-codeguru-reviewer-cicd-cdk-sample
name: Analyze with CodeGuru Reviewer
on: [push]
permissions:
id-token: write
contents: read
security-events: write
jobs:
CodeGuruReviewerScan:
runs-on: ubuntu-latest
steps:
- name: Assume IAM Role
id: iam-role
continue-on-error: true
uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: arn:aws:iam::048169001733:role/GuruGitHubCICDRole
aws-region: us-west-2
- uses: actions/checkout@v4
if: steps.iam-role.outcome == 'success'
with:
fetch-depth: 0
- name: Set up JDK 1.8
if: steps.iam-role.outcome == 'success'
uses: actions/setup-java@v4
with:
distribution: 'corretto'
java-version: 8
- name: Compile
if: steps.iam-role.outcome == 'success'
run: ./gradlew compileJava -x test
- name: Copy build artifacts
if: steps.iam-role.outcome == 'success'
run: |
mkdir -p class-files
cp -r smithy-*/build/classes/java/main/* class-files
- name: Run CodeGuru Reviewer
id: guruscan
if: steps.iam-role.outcome == 'success'
continue-on-error: true
uses: aws-actions/codeguru-reviewer@v1.1
with:
s3_bucket: codeguru-reviewer-github-profiler-demo-048169001733-uw2
build_path: ./class-files
- name: Upload review result
if: steps.iam-role.outcome == 'success' &&steps.guruscan.outcome == 'success'
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: codeguru-results.sarif.json