diff --git a/.github/workflows/powershell.yml b/.github/workflows/powershell.yml index 94c9bc1..200e585 100644 --- a/.github/workflows/powershell.yml +++ b/.github/workflows/powershell.yml @@ -36,10 +36,25 @@ jobs: with: # Check https://github.com/microsoft/action-psscriptanalyzer for more info about the options. # The below set up runs PSScriptAnalyzer to your entire repository and runs some basic security rules. - path: .\ + path: | + .\source\Classes + .\source\helper + .\source\Private + .\source\Public + .\source\tests recurse: true # Include your own basic security rules. Removing this option will run all the rules - includeRule: '"PSAvoidGlobalAliases", "PSAvoidUsingConvertToSecureStringWithPlainText"' + includeRule: | + "PSAvoidGlobalAliases", + "PSAvoidUsingConvertToSecureStringWithPlainText", + "PSAvoidUsingPlainTextForPassword", + "PSAvoidUsingInvokeExpression", + "PSUseApprovedVerbs", + "PSAvoidUsingPositionalParameters", + "PSAvoidUsingEmptyCatchBlock", + "PSAvoidUsingDeprecatedManifestFields", + "PSAvoidUsingUserNameAndPasswordParams", + "PSAvoidUsingCmdletAliases" output: results.sarif # Upload the SARIF file generated in the previous step