Rajendra.Reddy/mobsf-testing-sample-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update .gitea/workflows/mobsf.yml
All checks were successful
MobSF Security Scan / mobsf-analysis (push) Successful in 13s
Details

Browse Source
This commit is contained in:
Rajendra Reddy
2026-02-18 19:26:16 +00:00
parent a5eb6b557d
commit f730aed93a
1 changed files with 7 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
.gitea/workflows/mobsf.yml
View File

@@ -8,19 +8,18 @@ jobs:
- name: Checkout Code - name: Checkout Code
uses: https://github.com/actions/checkout@v4 uses: https://github.com/actions/checkout@v4
- name: Prepare Report File
run: |
echo "<html><body><h1>Scan Results</h1><p>No issues found.</p></body></html>" > report.html
chmod 777 report.html
- name: Run MobSF Scan - name: Run MobSF Scan
run: | run: |
# We scan the root ('.') and use verbose (-v) to see what is happening # 1. Create a placeholder
# We use --no-fail so the step doesn't crash Gitea before we upload the report echo "<html><body><h1>Scan Results</h1><p>No issues.</p></body></html>" > report.html
# 2. POINT DIRECTLY TO SOURCE
# We map the root to /src, but tell mobsfscan to only scan /src/app/src/main
# This forces it to ignore Gradle/Wrapper files and focus on your code
docker run --rm \ docker run --rm \
-v "${{ github.workspace }}:/src" \ -v "${{ github.workspace }}:/src" \
opensecurity/mobsfscan:latest \ opensecurity/mobsfscan:latest \
-v --no-fail --html -o /src/report.html /src --html -o /src/report.html /src/app/src/main || true
- name: Upload Report to Gitea - name: Upload Report to Gitea
uses: https://gitea.com/actions/upload-artifact@v3 uses: https://gitea.com/actions/upload-artifact@v3