mirror of
https://github.com/tinyfish-io/tinyfish-cookbook.git
synced 2026-09-14 17:41:39 +08:00
tinyfish-github-terraform[bot]
22 lines
625 B
YAML
22 lines
625 B
YAML
---
|
|
name: OSV-Scanner PR Scan
|
|
|
|
on: # yamllint disable-line rule:truthy
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
permissions:
|
|
# Required to upload SARIF file to CodeQL. See: https://github.com/github/codeql-action/issues/2117
|
|
actions: read
|
|
# Require writing security events to upload SARIF file to security tab
|
|
security-events: write
|
|
# Only need to read contents
|
|
contents: read
|
|
|
|
jobs:
|
|
vulnerability-check:
|
|
uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@6e4298ebc4db23e847df9b2e2de2939d6f066c67 # v2.5.1
|
|
with:
|
|
scan-args: --config osv-scanner.toml
|
|
upload-sarif: false
|