Add static analysis tool mobsfscan

mullvad · Nov 22, 2023 · e597217 · e597217
1 parent 285cf6f
commit e597217
Showing 1 changed file with 28 additions and 0 deletions.
diff --git a/.github/workflows/android-mobsfscan.yml b/.github/workflows/android-mobsfscan.yml
@@ -0,0 +1,28 @@
+---
+name: Android - mobsfscan
+on:
+  pull_request:
+    paths:
+      - .github/workflows/android-mobsfscan.yml
+      - android/**
+  workflow_dispatch:
+jobs:
+  mobsfscan:
+    name: mobsfscan code scanning
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: mobsfscan
+        uses: MobSF/mobsfscan@main
+        with:
+          args: '--type android --html --output mobsfscan-report.html android'
+
+      - name: Upload report
+        uses: actions/upload-artifact@v3
+        with:
+          name: mobsfscan-report
+          path: mobsfscan-report.html
+          if-no-files-found: error
+          retention-days: 7