From 644b28a5d9c937e6e9402b9e678a11a12f0a0fbf Mon Sep 17 00:00:00 2001 From: Ruben Halman Date: Wed, 26 Nov 2025 01:36:08 +0100 Subject: [PATCH 1/2] add lfs action to scan and test pr flow --- .github/workflows/scanAndTest.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/workflows/scanAndTest.yml b/.github/workflows/scanAndTest.yml index 16daa737d..3b66ead08 100644 --- a/.github/workflows/scanAndTest.yml +++ b/.github/workflows/scanAndTest.yml @@ -182,6 +182,20 @@ jobs: # If the env variable does not equal 'all', we know that there is a list of # tests that can be run + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Run Flow Scanner + id: scanner + uses: Flow-Scanner/lightning-flow-scanner-action@v2.1.1 + with: + outputMode: sarif # optional (default) + + - name: Upload SARIF to Code Scanning + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: ${{ steps.scanner.outputs.sarifPath }} + - name: 'Check-only deploy delta changes - run specified tests' if: ${{ env.APEX_TESTS != 'all' }} run: | From 32006527824cd8c114740db58409233fa37e181b Mon Sep 17 00:00:00 2001 From: Ruben Halman Date: Wed, 26 Nov 2025 01:39:22 +0100 Subject: [PATCH 2/2] run lfs in original dir --- .github/workflows/scanAndTest.yml | 26 ++++++++++++-------------- 1 file changed, 12 insertions(+), 14 deletions(-) diff --git a/.github/workflows/scanAndTest.yml b/.github/workflows/scanAndTest.yml index 3b66ead08..1151acbb2 100644 --- a/.github/workflows/scanAndTest.yml +++ b/.github/workflows/scanAndTest.yml @@ -154,6 +154,18 @@ jobs: - name: 'Authenticate to Integration Org' run: sfdx auth:sfdxurl:store -f ./SFDX_INTEGRATION_URL.txt -s -a integration + # Run Lightning Flow Scanner + - name: Run Flow Scanner + id: scanner + uses: Flow-Scanner/lightning-flow-scanner-action@v2.1.1 + with: + outputMode: sarif # optional (default) + + - name: Upload SARIF to Code Scanning + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: ${{ steps.scanner.outputs.sarifPath }} + # We use SFDX Git Delta to create a directory with only the metadata that has changed. # this allows us to deploy only those changes, as opposed to deploying the entire branch. # This helps reducing deployment times @@ -182,20 +194,6 @@ jobs: # If the env variable does not equal 'all', we know that there is a list of # tests that can be run - - name: Checkout repository - uses: actions/checkout@v4 - - - name: Run Flow Scanner - id: scanner - uses: Flow-Scanner/lightning-flow-scanner-action@v2.1.1 - with: - outputMode: sarif # optional (default) - - - name: Upload SARIF to Code Scanning - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: ${{ steps.scanner.outputs.sarifPath }} - - name: 'Check-only deploy delta changes - run specified tests' if: ${{ env.APEX_TESTS != 'all' }} run: |