Skip to content

Commit

Permalink
Merge pull request #67 from alphagov/add-sca-sast-scans
Browse files Browse the repository at this point in the history
Add CodeQL (SAST) scan and Dependency Review (SCA) scan to CI pipeline
  • Loading branch information
MuriloDalRi authored Nov 27, 2023
2 parents b88006a + 656ff77 commit 847f96d
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,16 @@
on: [push, pull_request]

jobs:
codeql-sast:
name: CodeQL SAST scan
uses: alphagov/govuk-infrastructure/.github/workflows/codeql-analysis.yml@main
permissions:
security-events: write

dependency-review:
name: Dependency Review scan
uses: alphagov/govuk-infrastructure/.github/workflows/dependency-review.yml@main

# This matrix job runs the test suite against multiple Ruby versions
test_matrix:
strategy:
Expand Down

0 comments on commit 847f96d

Please sign in to comment.