code-buster 0.11.0

name: Code Buster
on:
  pull_request:
  push:
    branches: [main]
permissions:
  contents: read
  security-events: write
jobs:
  analyse:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 0
      - name: Install Code Buster
        run: cargo install code-buster --version 0.11.0 --locked
      - name: Analyse changed production code
        run: cb review --changed-base '${{ github.event.pull_request.base.sha || github.event.before }}' --format sarif --output code-buster.sarif --fail-on-issues
      - name: Upload SARIF
        if: always()
        uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: code-buster.sarif