From 21cf0eda777914ba22dc92f8d3f816359c0fa50a Mon Sep 17 00:00:00 2001 From: Alex Lowe Date: Wed, 25 Sep 2024 18:39:00 -0400 Subject: [PATCH 1/2] ci: add security scanning job --- .github/workflows/security-scan.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/workflows/security-scan.yaml diff --git a/.github/workflows/security-scan.yaml b/.github/workflows/security-scan.yaml new file mode 100644 index 00000000..2ceac756 --- /dev/null +++ b/.github/workflows/security-scan.yaml @@ -0,0 +1,15 @@ +name: Security scan +on: + pull_request: + push: + branches: + - main + - hotfix/* + - work/secscan # For development + +jobs: + python-scans: + name: Scan Python project + uses: lengau/starflow/.github/workflows/scan-python.yaml@work/secscan + with: + packages: python-apt-dev From 535103e5767af6da5a814c365224d08c79ce9b45 Mon Sep 17 00:00:00 2001 From: Alex Lowe Date: Fri, 27 Sep 2024 09:48:31 -0400 Subject: [PATCH 2/2] chore: update for merge --- .github/workflows/security-scan.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-scan.yaml b/.github/workflows/security-scan.yaml index 2ceac756..35b2bed9 100644 --- a/.github/workflows/security-scan.yaml +++ b/.github/workflows/security-scan.yaml @@ -10,6 +10,6 @@ on: jobs: python-scans: name: Scan Python project - uses: lengau/starflow/.github/workflows/scan-python.yaml@work/secscan + uses: canonical/starflow/.github/workflows/scan-python.yaml@main with: packages: python-apt-dev