From 584ac7cccff42ac467178b5013a1d7f83deb2185 Mon Sep 17 00:00:00 2001
From: Duan-0916 <76544421+Duan-0916@users.noreply.github.com>
Date: Thu, 30 Nov 2023 16:40:00 +0800
Subject: [PATCH] Create cloud_code_scan.yml (#797)

Co-authored-by: leo james <leojames.googol@gmail.com>
---
 .github/workflows/cloud_code_scan.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 .github/workflows/cloud_code_scan.yml

diff --git a/.github/workflows/cloud_code_scan.yml b/.github/workflows/cloud_code_scan.yml
new file mode 100644
index 000000000..9a6da4aec
--- /dev/null
+++ b/.github/workflows/cloud_code_scan.yml
@@ -0,0 +1,22 @@
+name: Alipay Cloud Devops Codescan
+on:
+  pull_request_target:
+jobs:
+  stc:   # Code security scanning
+    runs-on: ubuntu-latest
+    steps:
+      - name: codeScan
+        uses: layotto/alipay-cloud-devops-codescan@main
+        with:
+          parent_uid: ${{ secrets.ALI_PID }}
+          private_key: ${{ secrets.ALI_PK }}
+          scan_type: stc
+  sca:   # Open source compliance scanning
+    runs-on: ubuntu-latest
+    steps:
+      - name: codeScan
+        uses: layotto/alipay-cloud-devops-codescan@main
+        with:
+          parent_uid: ${{ secrets.ALI_PID }}
+          private_key: ${{ secrets.ALI_PK }}
+          scan_type: sca