name: MobSF Security Integration
on: [push]

jobs:
  mobsf-analysis:
    runs-on: ubuntu-latest
    steps:
      # 1. Checkout runs on the runner host (which has Node.js)
      - name: Checkout Code
        uses: https://github.com/actions/checkout@v4

      # 2. Run MobSF using a Docker command
      # We mount the current folder into the container's /src folder
      - name: MobSF Scan
        run: |
          docker run --rm -v $(pwd):/src opensecurity/mobsfscan:latest /src --html --output /src/report.html || true

      # 3. Upload the report to Gitea
      - name: Upload Report to Gitea
        uses: https://gitea.com/actions/upload-artifact@v3
        with:
          name: Security-Analysis-Report
          path: report.html