Skip to content

Commit c43ad1b

Browse files
author
GitOps Bot
committed
ci: add security workflows
1 parent 09c5055 commit c43ad1b

File tree

3 files changed

+49
-0
lines changed

3 files changed

+49
-0
lines changed

‎.github/workflows/auto-merge.yml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
name: Auto Merge Dependabot
2+
3+
on:
4+
pull_request:
5+
types: [labeled]
6+
7+
jobs:
8+
automerge:
9+
runs-on: ubuntu-latest
10+
if: github.actor == 'dependabot[bot]'
11+
steps:
12+
- uses: peter-evans/enable-pull-request-automerge@v3
13+
with:
14+
token: ${{ secrets.GITHUB_TOKEN }}
15+
pull-request-number: ${{ github.event.pull_request.number }}

‎.github/workflows/codeql.yml

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
name: "CodeQL"
2+
3+
on:
4+
push:
5+
branches: ["main"]
6+
pull_request:
7+
branches: ["main"]
8+
schedule:
9+
- cron: '0 0 * * 1'
10+
11+
jobs:
12+
analyze:
13+
runs-on: ubuntu-latest
14+
strategy:
15+
matrix:
16+
language: [javascript, python]
17+
steps:
18+
- uses: actions/checkout@v4
19+
- uses: github/codeql-action/init@v3
20+
with:
21+
languages: ${{ matrix.language }}
22+
- uses: github/codeql-action/analyze@v3

‎.github/workflows/gitleaks.yml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
name: Gitleaks
2+
3+
on: [push, pull_request]
4+
5+
jobs:
6+
gitleaks:
7+
runs-on: ubuntu-latest
8+
steps:
9+
- uses: actions/checkout@v4
10+
- uses: gitleaks/gitleaks-action@v2
11+
with:
12+
args: "--verbose --redact"

0 commit comments

Comments
 (0)