Skip to content

Bump Microsoft.AspNetCore.Components.WebAssembly.DevServer from 10.0.2 to 10.0.3 #39

Bump Microsoft.AspNetCore.Components.WebAssembly.DevServer from 10.0.2 to 10.0.3

Bump Microsoft.AspNetCore.Components.WebAssembly.DevServer from 10.0.2 to 10.0.3 #39

Workflow file for this run

name: Security
on:
pull_request:
branches: [main]
paths:
- ".github/workflows/security.yml"
- "Directory.Build.props"
- "Directory.Build.targets"
- "AdvancedDevSample.Api/**"
- "AdvancedDevSample.Application/**"
- "AdvancedDevSample.Infrastructure/**"
- "AdvancedDevSampleDomain/**"
- "AdvancedDevSample.Test/**"
- "AdvancedDevSample.Frontend/**"
schedule:
- cron: "0 3 * * 1"
permissions:
contents: read
concurrency:
group: security-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
dependency-review:
if: github.event_name == 'pull_request'
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
steps:
- name: Dependency review
uses: actions/dependency-review-action@v4
codeql:
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Initialize CodeQL
uses: github/codeql-action/init@v4
with:
languages: csharp
build-mode: autobuild
- name: Autobuild
uses: github/codeql-action/autobuild@v4
- name: Analyze
uses: github/codeql-action/analyze@v4
secrets-scan:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Run Gitleaks
uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7