Skip to content

Commit 9d96cb9

Browse files
committed
Sync auto-sec-scan.yml from .github repo
1 parent 4f9cd42 commit 9d96cb9

File tree

1 file changed

+3
-30
lines changed

1 file changed

+3
-30
lines changed
Lines changed: 3 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -1,43 +1,16 @@
11
name: "Security Scan on PR"
2-
32
on:
43
pull_request:
54
types: [opened, synchronize, reopened]
6-
schedule:
7-
- cron: '0 0 * * 1' # Weekly on Monday
8-
workflow_dispatch:
9-
105
jobs:
116
security_scan:
12-
runs-on: self-hosted
13-
7+
runs-on: [self-hosted, linux, x64, big]
148
steps:
159
- name: Checkout code
1610
uses: actions/checkout@main
17-
18-
- name: Set up Python
19-
uses: actions/setup-python@v5
20-
with:
21-
python-version: '3.11'
22-
23-
- name: Install Poetry
24-
uses: snok/install-poetry@v1
25-
with:
26-
version: latest
27-
virtualenvs-create: true
28-
virtualenvs-in-project: true
29-
30-
- name: Install dependencies
31-
run: poetry install --with dev
32-
33-
- name: Run Bandit Security Scan
34-
run: poetry run bandit -r cdp/ generator/ -f txt
35-
3611
- name: Run CodeQL Scan
3712
uses: github/codeql-action/init@main
3813
with:
39-
languages: 'python'
40-
14+
languages: 'python,javascript'
4115
- name: Perform CodeQL Analysis
42-
uses: github/codeql-action/analyze@main
43-
16+
uses: github/codeql-action/analyze@main

0 commit comments

Comments
 (0)