datadog-static-analysis.yml

name: Datadog Static Analysis

on:
  push:

permissions:
  contents: write # write permission is needed to get access to the DD_API_KEY secrete - https://docs.github.com/en/actions/security-for-github-actions/security-guides/using-secrets-in-github-actions#accessing-your-secrets

jobs:
  static-analysis:
    name: Datadog Static Analyzer
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Check code meets quality and security standards
        id: datadog-static-analysis
        uses: DataDog/datadog-static-analyzer-github-action@v1
        with:
          dd_api_key: ${{ secrets.DD_API_KEY }}
          dd_app_key: ${{ secrets.DD_APP_KEY }}
          dd_service: kubehound
          dd_env: ci
          dd_site: datadoghq.com
          cpu_count: 2