From 3f80464d832a7e78b7d23c177af7e764cd05ac4a Mon Sep 17 00:00:00 2001 From: tlee-skillz Date: Mon, 14 Nov 2022 15:17:33 -0800 Subject: [PATCH] [PS-68959] Adding security action --- .github/workflows/security-action.yaml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/workflows/security-action.yaml diff --git a/.github/workflows/security-action.yaml b/.github/workflows/security-action.yaml new file mode 100644 index 0000000..5761073 --- /dev/null +++ b/.github/workflows/security-action.yaml @@ -0,0 +1,17 @@ +name: Security Action +on: + pull_request: {} +jobs: + scan: + env: + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} + JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }} + JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }} + runs-on: [feature/generic, size/sm, env/infra-mgmt, group/default] + steps: + - name: code checkout + uses: actions/checkout@v3 + - name: scan + uses: docker://docker.jfrog.skillz.com/security-action:latest + env: + REPO: ${{ github.repository }}