diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml new file mode 100644 index 0000000..94e8c31 --- /dev/null +++ b/.github/workflows/security-scan.yml @@ -0,0 +1,23 @@ +name: Security scan + +on: + workflow_dispatch: + schedule: + - cron: "0 6 * * 0" # At 06AM on Sunday. + +permissions: + actions: read + checks: write + contents: read + id-token: write + packages: read + pull-requests: write + security-events: write + +jobs: + security_scan: + uses: ZeroGachis/.github/.github/workflows/security-scan.yml@v7 + secrets: inherit + with: + scan-image: false + scan-iac: false \ No newline at end of file