action.yml

name: 'CodeQL Bicep Extractor'
description: 'CodeQL Bicep Extractor GitHub Action'
author: 'GitHub Security Lab'
branding:
  color: 'blue'
  icon: 'lock'

inputs:
  token:
    description: >
      The GitHub token used to make authenticated API requests.
    default: ${{ github.token }}
    required: false
outputs:
  sarif-results:
    description: >
      The path to the SARIF results file generated by the extractor.
    value: ${{ steps.extractor.outputs.sarif_results }}

runs:
  using: 'composite'
  steps:
    - name: "CodeQL Extractor Action"
      uses: advanced-security/codeql-extractor-action@v0.0.16
      id: extractor
      with:
        token: ${{ inputs.token }}
        extractors: "GitHubSecurityLab/codeql-extractor-bicep@v0.3.0"
        packs: githubsecuritylab/bicep-queries
        languages: "bicep"
        # Assumes GH is installed
        # attestation: true